homelab-CVE-2021-44228

Homelab: Log4Shell CVE-2021-44228 on Apache Solr Controlled Docker environment to reproduce and study the Log4Shell vulnerability in Apache Solr. The Environment Target solr-lab: Apache Solr v8.11.0 vulhub/solr:8.11.0 running a vulnerable version of Log4j. Attacker kali-lab: Basic Kali Linux...

Tai-e

Tai-e ✨News Release v0.5.4: Tai-e ships with a new frontend, providing faster and more reliable conversion from Java programs to Tai-e IR. Android app analysis is supported through a PacDroid-powered plugin integrated with pointer analysis. Spring DI and WEC analysis is supported through the Spri...

CVE-2021-44228-PoC

CVE-2021-44228 PoC PoC for CVE-2021-44228. Project made for EDUCATIONAL PURPOSES ONLY. Exploit server This project creates two servers: http and ldap. Both are necessary for exploit to work. Specified java file is compiled and servers are started in Dockerfile. Payload is shown to user - it has t...

Log4J_0day_RCE

Join Community Telegram CVE-2021-44228Apache Log4j Remote Code Execution） Affected versions you can use JNDI-Injection-Exploit to Exploit. Bypass rc1 For example: root@kitploit: $jndi:ldap://127.0.0.1:1389/ badClassName Bypass WAF...

TPASLog4ShellPoC

TPAS Log4Shell PoC This repository contains a Proof of Concept PoC for the Log4Shell vulnerability CVE-2021-44228, developed as part of the coursework for the curricular unit TPAS in the Master's degree in Information Security at FCUP. It features: A React SPA frontend that simulates a generic...

CVE-2021-44228_scanner

CVE-2021-44228scanner Applications that are vulnerable to the log4j CVE-2021-44228 issue may be detectable by scanning jar, war, and ear files to search for the presence of JndiLookup.class. Depending on the platform that you are investigating, the PowerShell or the Python3 script may make more...

Log4jShell-Scan

Overview log4j2 RCE vulnerability CVE-2021-44228 intranet scanner, can be used for vulnerability scanning under the condition of no internet access, helping enterprises quickly discover Log4Shell vulnerabilities. Modified from: https://github.com/fullhunt/log4j-scan JNDIMonitor from:...

KubeArmor

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...

CVE-2021-44228

This repository does not have a README...

log4j-cve-2021-44228

log4j-cve-2021-44228...

CVE-2021-44228

CVE-2021-44228 Mass recognition tool for CVE-2021-44228 need to fix Crypto library to work with Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py replace line 77 : t = time.clock with : t = time.perfcounter how to use : sudo python3 192.168.0.0/8 mylog.txt...

Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228

Log4JExploitation-VulnerabiliyCVE-2021-44228. introduction A Remote Code Execution vulnerability has been found related to the Java logging library Log4j. CVE-2021-44228 This vulnerability has caused a stir in the global cyber community, since the Wannacry we have not seen such an impact. the...

log4shell

log4shell Content to help the community responding to the Log4j Vulnerability Log4Shell CVE-2021-44228...

log4j2021_vul_test

log4j2021vultest Test the CVE https://vulners.com/cve/CVE-2021-44228...

log4j2-rce-recap

Little recap of the log4j2 remote code execution CVE-2021-44228 Requirements maven = 3 java = 8 no running ldap on 127.0.0.1:1389 Usage Build with maven. root@kitploit: mvn test The surefire plugin will be executed two times: ExploitabilityTest proofs the expolitability of the bug. MitigationTest...

log4j-filescan

████████████████▀███████████████████████████████████████████████████████████████████ █▄─▄███─▄▄─█─▄▄▄▄█░█░████▄─▄█▀▀▀▀▀██▄─▄▄─█▄─▄█▄─▄███▄─▄▄─█─▄▄▄▄█─▄▄▄─██▀▄─██▄─▀█▄─▄█ ██─██▀█─██─█─██▄─█▄▄░██─▄█─██████████─▄████─███─██▀██─▄█▀█▄▄▄▄─█─███▀██─▀─███─█▄▀─██...

jndi-ldap-test-server

jndi-ldap-test-server This is a minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228. How to test vulnerability to CVE-2021-44228 1. Download the test server binary for your platform you can find all binaries under Release...

THM---Solar-exploiting-Log-4j

THM---Solar-exploiting-Log-4j This room is based on exploiting the notorious Log4j vulnerability CVE-2021-44228, also referred to as the Log4Shell. The weakness enables attackers to execute a remote code via injection of the malicious payloads into the log messages. TASK 1 – CVE-2021-44228...

log4j-payload-generator

log4j-payload-generator log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228. Deployment To deploy this project run root@kitploit: sudo git clone https://github.com/yesspider-hacker/log4j-payload-generator.git Running Tests To run tests, run the following...

log4shell-iocs

Log4Shell-IOCs IOC feeds curated by WatchGuard Threat Lab that contain recent attempts to probe or exploit CVE-2021-44228 in Log4j2 Analyst Comments 2021-12-17 Threats shared in this feed should be used for THREAT HUNTING and added to a WATCHLIST. We strongly recommend NOT adding them to a...