Log4j_Attacker_IPList

Log4jAttackerIPList CVE-2021-44228 Log4j Attacker Ip List.xlsx...

log4j-CVE-2021-44228

log4j-CVE-2021-44228 On December 5, 2021, Apache identified a vulnerability later identified as CVE-2021-44228 in their widely used Log4j logging service. The vulnerability, also known as Log4shell, enables attackers to gain full control of affected servers by allowing unauthenticated remote code...

log4j2021_vul_test

log4j2021vultest Test the CVE https://vulners.com/cve/CVE-2021-44228...

CVE-2021-44228-PoC

CVE-2021-44228 PoC PoC for CVE-2021-44228. Project made for EDUCATIONAL PURPOSES ONLY. Exploit server This project creates two servers: http and ldap. Both are necessary for exploit to work. Specified java file is compiled and servers are started in Dockerfile. Payload is shown to user - it has t...

Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832

Log4J-Mitigation-CVE-2021-44228,CVE-2021-45046,CVE-2021-45105,CVE-2021-44832 Please keep an eye on this as Apache Log4j team is disclosing a lot more CVE and fixing security issues very rapidly...

log4j-scanner

log4j-scanner Check CVE-2021-44228 vulnerability This test is not 100% reliable, but it helps with a quick scan How tu use: root@kitploit: wget https://raw.githubusercontent.com/codiobert/log4j-scanner/main/log4j-scanner.sh -q -O - |bash...

Log4j

1.Create a Sample Vulnerable Application . 2.Start a netcat listner . 3.Run the exploit . 5.Use jdk1.8.020 for better results . Exploit-db - https://www.exploit-db.com/exploits/50592...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: root@kitploit: docke...

log4shell-CVE-2021-44228

Log4Shell direct-impact fixture Deliberately vulnerable, non-deployable Java/Maven input for ShieldOps. Do not build, execute, or deploy it. The project pins org.apache.logging.log4j:log4j-core:2.14.1. LoginAuditService.recordLoginAttempt sends an unauthenticated HTTP User-Agent value into a Log4...

Log4Shell

CVE-2021-44228: Log4j / Log4Shell Security Research Summary This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell. Threat Intel Mitigations / Fixes Malware Reports Advisory IOCs / Callback Domains / IP Addresses...

Log4J_checker

Log4Jchecker Log4J checker for Apache CVE-2021-44228 log4j-checker.sh is a bash script that merges several checks...

log4j-CVE-2021-44228-Public-IoCs

log4j log4shell CVE-2021-44228 Public IoCs list Public IoCs about log4j CVE-2021-44228 log4shell based on Twitter and others social networks pull requests accepted, I remove duplicates automatically IPs https://github.com/Sh0ckFR/log4j-CVE-2021-44228-Public-IoCs/raw/main/ips.txt Callbacks domains...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 scanner playbook Very simple Ansible playbook that scan the filesystem for JAR files vulnerable to Log4Shell CVE-2021-44228. The result is saved in a CSV file in the local system. How to run A value for the name of the CSV file must be passed via the localfile variable...

log4j-checker

Log4j-Checker This repository contains scripts that can help identity .jar files which may be vulnerable to CVE-2021-44228 aka Log4Shell. Log4Shell Hash Check This script will find .jar files within the filesystem starting from a specific path, calculate a SHA-256 hash for each .jar file found -...

CVE-2021-44228-white-box

Article Journal: https://www.researchgate.net/publication/373214720PengujianKerentananpadaCVE-2021-44228terhadapAncamanRemoteAccessTrojan Thesis: https://1drv.ms/b/s!Al-8jtgY0iBXmz79DKEROaZT5n8a?e=1E6Pkm Log4Shell // n. Log4j Vulnerability Environment Box This repo purposely built for Log4j...

Apache-Log4j-POC

Apache-Log4j-POC CVE-2021-44228 Proof of Concept of apache log4j LDAP lookup vulnerability You can read more about the vulnerability here: https://blog.cloudflare.com/inside-the-log4j2-vulnerability-cve-2021-44228/ How to run the provided ldap server that returns malicious object ? java -jar...

CVE-2021-44228

Log4Shell POC CVE-2021-44228 The scope of this repository is to provide all the components needed to exploit CVE-2021-44228, nicknamed Log4Shell, and to show how to exploit it. The ingredients needed to exploit this vulnerability are the following: 1. An LDAP Server that will redirect the...

CVE-2021-44228-Log4Shell-Hashes

CVE-2021-44228-Log4Shell-Hashes Hashes for vulnerable LOG4J versions Created to help orgs search for this vulnerable versions https://www.lunasec.io/docs/blog/log4j-zero-day/ Source of the hashes: https://archive.apache.org/dist/logging/log4j/ Possibly 1.X affected...

CVE-2021-44228-Log4j-Payloads

This repository does not have a README...

log4j2_vul_local_scanner

Log4j2 Vulnerability Local Scanner CVE-2021-45046 Log4j 漏洞本地检测脚本，扫描主机上所有java进程，检测是否引入了有漏洞的log4j-core jar包，是否可能遭到远程代码执行攻击（CVE-2021-45046）。上传扫描报告到指定的服务器。 Scan all java processes on your host to check whether it's affected by log4j2 remote code executionCVE-2021-45046, then upload the report to your...