622 matches found
Log4j-Exploit-CVE-2021-44228
Log4j-Exploit-CVE-2021-44228 Log4Shell Vulnerability Test Tool https://log4shell.tools/ Exploit with java already included, to avoid creating an account etc.. http://www.mediafire.com/file/bs1spnysc6fbz1a/log4j-shell-poc%25281%2529.zip/file pip install -r requirements.txt $ python3 poc.py --useri...
log4shell-exploitation-and-detection-lab
Log4Shell Exploitation, Detection, and Remediation Lab A self...
CVE-2021-44228
CVE-2021-44228 I think this story is more practical cryingchristophetd/log4shell-vulnerable-app I just researched on a whim out of interest, so there may be vague parts or mistakes. Please proceed at your own risk. Create a reproduction environment. Should work on Linux environments. 1. Download...
log4shell
Log4Shell This project is a demonstration of how the log4shell security vulnerability works. This vulnerability is described in CVE-2021-44228. The project is intended for educational purposes only. It should only be used on your own system and solely for experimental purposes. Any execution is...
CVE-2021-44228-Log4Shell-
log4j...
solar-exploiting-log4j
🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability 🧠 Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. 🛠️ Tools Used Nmap Burp Suite cURL...
py-log4shellscanner
PY-Log4ShellScanner A simple, one-file DNSLog server with HTTP endpoint for log retrieval Credit Based on the Log4jScanner by fullhunt.io, modified with multithreading and custom DNS Callback server Features Support for lists of URLs Fuzzing for more than 60 HTTP request headers, with ability to...
Apache Log4j 2.14.1 JndiLookup Class Removal
An Ansible role and Python tool remove the JndiLookup class from affected Log4j archives to mitigate the Log4Shell vulnerability...
CVE-2021-44228
CVE-2021-44228 Log4Shell CVE-2021-44228 Vulnerability Scanner and POC...
CVE-2021-44228-Apache-Log4j-Rce-main
CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...
nse-log4shell
nse-log4shell Nmap NSE scripts to check against log4shell or LogJam vulnerabilities CVE-2021-44228. NSE scripts check most popular exposed services on the Internet. It is basic script where you can customize payload. Examples Note that NSE scripts will only issue the requests to the services. Nma...
LOG4J-CVE-2021-44228
LOG4J-CVE-2021-44228 Log4Shell — also known as CVE-2021-44228 — is a critical vulnerability that enables remote code execution in systems using the Apache Foundation’s Log4j, which is an open-source Java library that is extensively used in commercial and open-source software products and utilitie...
TPASLog4ShellPoC
TPAS Log4Shell PoC This repository contains a Proof of Concept PoC for the Log4Shell vulnerability CVE-2021-44228, developed as part of the coursework for the curricular unit TPAS in the Master's degree in Information Security at FCUP. It features: A React SPA frontend that simulates a generic...
CVE-2021-44228_scanner
CVE-2021-44228scanner Applications that are vulnerable to the log4j CVE-2021-44228 issue may be detectable by scanning jar, war, and ear files to search for the presence of JndiLookup.class. Depending on the platform that you are investigating, the PowerShell or the Python3 script may make more...
log4shell-hotfix-side-effect
Log4Shell Hotfix Side Effect Test Case I wanted to know if any ClassNotFoundException or similar unexpected exception is raised when one applies the CVE-2021-44228 aka Log4Shell hotfix as recommended here. Result: It looks like no exception is bubbling up. To test this execute the following...
Log4Shell-Honeypot
Log4Shell Honeypot Enhanced dockerized honeypot for CVE-2021-44228 with comprehensive security features, monitoring, and alerting capabilities. Features Enhanced Detection Comprehensive Pattern Matching : Detects 20+ Log4Shell exploit patterns including JNDI, LDAP, RMI, DNS, and environment...
scan-log4shell
scan-log4shell A scanning suite to find servers affected by the log4shell flaw CVE-2021-44228 with example to test it...
log4j-scan
log4j-scan Un escáner totalmente automatizado, preciso y exhaustivo para encontrar hosts vulnerables a log4j Características Soporte para listas de URLs. Fuzzing en más de 60 cabeceras HTTP de solicitud no solo 3-4 cabeceras como en herramientas anteriores. Fuzzing en parámetros de datos POST HTT...
log4j-finder
log4j-finder Un script en Python3 para escanear el sistema de archivos y encontrar Log4j2 vulnerable a Log4Shell CVE-2021-44228 y CVE-2021-45046 y CVE-2021-45105. Escanea recursivamente tanto en disco como dentro de archivos Java Archive JAR anidados. Cómo funciona log4j-finder identifica librerí...