CVE-2021-44228-PoC

CVE-2021-44228 Log4Shell Prueba de concepto Las funciones JNDI de Apache Log4j2 =2.14.1 utilizadas en la configuración, los mensajes de registro y los parámetros no protegen contra LDAP controlado por el atacante y otros endpoints relacionados con JNDI. Un atacante que pueda controlar los mensaje...

Log4j-Vulnerability

Log4j Vulnerability Tutorial: https://youtu.be/PNDBjoT83zA Tutorial: https://cryptodeeptech.ru/log4j-vulnerability Background on Log4j Alibaba Cloud Security Team publicly disclosed a critical vulnerability CVE-2021-44228 enabling unauthenticated remote code execution against multiple versions of...

CVE-2021-44228-Demo

CVE-2021-44228-Demo Ejemplo de inyección remota de código a través de CVE-2021-44228 utilizando RMI y LDAP. root@kitploit: Exploit class from RMI Server loaded Hello, $jndi:rmi://127.0.0.1:1099/exploit Exploit class from LDAP Server loaded Hello,...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Triage: CVE-2021-44228 Log4Shell / Log4j For this lab, the goal was to triage another well-known real-world vulnerability, Log4Shell, one of the most widely exploited vulnerabilities in recent years due to how common the affected library was across enterprise software. Step 1: Open the CVE in NVD...

Log4jPatch

-- This repository has been archived -- Further development of this tool will continue at corretto/hotpatch-for-apache-log4j2. Thanks for sharing, commenting, trying it out and contributing to this project! Log4jPatch This is a POC of a simple tool which injects a Java agent into a running JVM...

log4j-vul

log4j-vul This project is just to show Apache Log4j2 Vulnerability - aka CVE-2021-44228 Java: java version "1.8.0121" Compile: from src folder javac -classpath .;..\lib\log4j-api-2.1.jar;..\lib\log4j-core-2.1.jar com\example\Log4jVul.java Execute\Run: from src folder java -classpath...

CVE-2021-44228

CVE-2021-44228 PoC Log4Shell ⚠️ Disclaimer: This tool is intended for educational purposes, security research, and controlled test environments only. Using it against systems without explicit permission is illegal and entirely the responsibility of the user. 📌 Description This project contains a...

Log4j-Rec-CVE-2021-44228

Log4j2 Replication Notes, For Learning Only Reference: https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce Create Executable File root@kitploit: com/example/template javac Log4jRCE.java Start Python Built-in HTTP Server root@kitploit: com/example/template python -m http.server 8888...

cve-2021-44228-log4shell_rce_reproduction

CVE-2021-44228 — Log4Shell: Apache Log4j2 Remote Code Execution CVSS 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | CWE-917: Improper Neutralization for Expression Language Injection Overview Log4Shell CVE-2021-44228 is arguably the most severe vulnerability of the 2020s, affecting...

CVE-2021-44228---Log4Shell-Analysis

🔥 Análisis de Log4Shell CVE-2021-44228 Un análisis técnico completo de la vulnerabilidad Log4Shell CVE-2021-44228, una de las vulnerabilidades más críticas en la historia del software moderno. 📖 Resumen Este repositorio contiene un análisis en profundidad de la vulnerabilidad Log4Shell en Apache...

Log4Shell-CVE-2021-44228-PoC

Log4Shell CVE-2021-44228: Brief Description Apache Log4j2 2.0-beta9 through 2.15.0 no releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control...

Apache-Log4j2-RCE

Entorno de verificación de RCE de Apache Log4j2 Desde el 2021.12.09 Algunas referencias https://mp.weixin.qq.com/s/yck74F9p9QhVw3ykzVoSg Configuración del entorno Introducción de paquetes Maven y rangos de versiones vulnerables root@kitploit: org.apache.logging.log4j log4j-api 2.14.1...

Awesome-CVE-2021-44228

Awesome-CVE-2021-44228 Una increíble lista seleccionada de repositorios para CVE-2021-44228. PoC tangxiaofeng7 https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce christophetd https://github.com/christophetd/log4shell-vulnerable-app jas502n...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Triage: CVE-2021-44228 Log4Shell / Log4j In questo laboratorio, l'obiettivo era fare il triage di un'altra vulnerabilità reale e ben nota, Log4Shell, una delle vulnerabilità più sfruttate degli ultimi anni a causa di quanto fosse diffusa la libreria interessata nel software aziendale. Passo 1:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-api-jdo (UTSA-2026-093016)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093016 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: HikariCP (UTSA-2026-093041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093041 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032289 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032285 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

Debian: Security Advisory (DLA-4444-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4444-1] apache-log4j2 security update

Debian LTS Advisory DLA-4444-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 19, 2026 https://wiki.debian.org/LTS Package : apache-log4j2 Version : 2.17.1-1deb11u2 CVE ID : CVE-2025-68161 Debian Bug : 1123744 In Apache Log4j2, a Java Logging Framework, t...