CVE-2021-44228-PoC

CVE-2021-44228 Log4Shell Prueba de concepto Las funciones JNDI de Apache Log4j2 =2.14.1 utilizadas en la configuración, los mensajes de registro y los parámetros no protegen contra LDAP controlado por el atacante y otros endpoints relacionados con JNDI. Un atacante que pueda controlar los mensaje...

Awesome-CVE-2021-44228

Awesome-CVE-2021-44228 Una increíble lista seleccionada de repositorios para CVE-2021-44228. PoC tangxiaofeng7 https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce christophetd https://github.com/christophetd/log4shell-vulnerable-app jas502n...

Log4j-Vulnerability

Vulnerabilidad Log4j Tutorial: https://youtu.be/PNDBjoT83zA Tutorial: https://cryptodeeptech.ru/log4j-vulnerability Antecedentes de Log4j El equipo de seguridad de Alibaba Cloud reveló públicamente una vulnerabilidad crítica CVE-2021-44228 que permite la ejecución remota de código sin autenticaci...

CVE-2021-44228-Demo

CVE-2021-44228-Demo Ejemplo de inyección remota de código a través de CVE-2021-44228 utilizando RMI y LDAP. Exploit class from RMI Server loaded Hello, $jndi:rmi://127.0.0.1:1099/exploit Exploit class from LDAP Server loaded Hello, $jndi:ldap://127.0.0.1:1389/org.mazhuang.ldap.Exploit RmiServer y...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Triage: CVE-2021-44228 Log4Shell / Log4j For this lab, the goal was to triage another well-known real-world vulnerability, Log4Shell, one of the most widely exploited vulnerabilities in recent years due to how common the affected library was across enterprise software. Step 1: Open the CVE in NVD...

Log4jPatch

-- This repository has been archived -- Further development of this tool will continue at corretto/hotpatch-for-apache-log4j2. Thanks for sharing, commenting, trying it out and contributing to this project! Log4jPatch This is a POC of a simple tool which injects a Java agent into a running JVM...

log4j-vul

log4j-vul Este proyecto solo tiene como objetivo mostrar la vulnerabilidad de Apache Log4j2 - también conocida como CVE-2021-44228 Java: java version "1.8.0121" Compilar: from src folder javac -classpath .;..\lib\log4j-api-2.1.jar;..\lib\log4j-core-2.1.jar com\example\Log4jVul.java Ejecutar\Corre...

cve-2021-44228-log4shell_rce_reproduction

CVE-2021-44228 — Log4Shell: Apache Log4j2 Remote Code Execution CVSS 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | CWE-917: Improper Neutralization for Expression Language Injection Overview Log4Shell CVE-2021-44228 is arguably the most severe vulnerability of the 2020s, affecting...

CVE-2021-44228---Log4Shell-Analysis

🔥 Análisis de Log4Shell CVE-2021-44228 Un análisis técnico completo de la vulnerabilidad Log4Shell CVE-2021-44228, una de las vulnerabilidades más críticas en la historia del software moderno. 📖 Resumen Este repositorio contiene un análisis en profundidad de la vulnerabilidad Log4Shell en Apache...

Log4j-Rec-CVE-2021-44228

Notas de reproducción de Log4j2, solo para aprendizaje Referencia: https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce Crear el archivo ejecutable com/example/template javac Log4jRCE.java Iniciar el servidor HTTP integrado de Python com/example/template python -m http.server 8888...

CVE-2021-44228

CVE-2021-44228 PoC Log4Shell ⚠️ Aviso legal: Esta herramienta está destinada solo a fines educativos, investigación de seguridad y entornos de prueba controlados. Usarla contra sistemas sin permiso explícito es ilegal y es responsabilidad exclusiva del usuario. 📌 Descripción Este proyecto contiene...

Log4Shell-CVE-2021-44228-PoC

Log4Shell CVE-2021-44228: Descripción breve Apache Log4j2 2.0-beta9 hasta 2.15.0 excepto las versiones 2.12.2, 2.12.3 y 2.3.1 Las funciones JNDI utilizadas en la configuración, los mensajes de registro y los parámetros no protegen contra endpoints LDAP controlados por el atacante y otros endpoint...

Apache-Log4j2-RCE

Entorno de verificación de RCE de Apache Log4j2 Desde el 2021.12.09 Algunas referencias https://mp.weixin.qq.com/s/yck74F9p9QhVw3ykzVoSg Configuración del entorno Introducción de paquetes Maven y rangos de versiones vulnerables org.apache.logging.log4j log4j-api 2.14.1 org.apache.logging.log4j...

Astra Linux – Vulnerability in Apache Log4j2

The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters prohibited by the XML 1.0 standard, resulting in malformed XML output. Compatible XML parsers are required to reject documents containing such characters with a fatal error, which may cause downstream log...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Triage: CVE-2021-44228 Log4Shell / Log4j In questo laboratorio, l'obiettivo era fare il triage di un'altra vulnerabilità reale e ben nota, Log4Shell, una delle vulnerabilità più sfruttate degli ultimi anni a causa di quanto fosse diffusa la libreria interessata nel software aziendale. Passo 1:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-api-jdo (UTSA-2026-093016)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093016 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032285 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032289 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: HikariCP (UTSA-2026-093041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093041 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Debian: Security Advisory (DLA-4444-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...