cloudrasp-log4j2

CloudArmor · ランタイムアプリケーション自己防御モジュール - Log4j2 バージョン 简体中文 このプロジェクトは、Log4j2 CVE-2021-44228 を防御するために特別に構築された CloudArmor のローカルバージョンです。このプロジェクトを実行するためにネットワーク接続は必要ありません。 本番環境にデプロイする前に必ずテストを行ってください。...

log4j-poc

log4j-poc CVE-2021-44228 Log4Shell용 LDAP RCE 익스플로잇 설명 포트 8080의 데모 Tomcat 8 서버에는 취약한 앱log4shell이 배포되어 있으며, 서버는 user-agent 공격에도 취약합니다. 이 데모의 원격 익스플로잇 앱은 https://github.com/kozmer/log4j-shell-poc 에서 찾은 것을 기반으로 합니다. 이 데모 tomcat 서버Tomcat 8.5.3, Java 1.8.0u51는 로깅에 Log4J2를 사용하도록 재구성되었습니다비표준 구성. 새로운...

Log4jShell-Scan

نظرة عامة ماسح ضوئي لثغرة RCE في log4j2 CVE-2021-44228 للشبكات الداخلية، يمكن استخدامه لمسح الثغرات دون الحاجة إلى اتصال بالإنترنت، مما يساعد المؤسسات على اكتشاف ثغرة Log4jShell بسرعة. معدل من: https://github.com/fullhunt/log4j-scan JNDIMonitor من: r00tSe7en/JNDIMonitor: مستمع لطلبات LDAP، للتخلص...

log4shell-tools

log4shell.tools log4shell.tools هي أداة تسمح لك بتشغيل اختبار للتحقق مما إذا كان أحد تطبيقاتك متأثرًا بالثغرات الحديثة في log4j: CVE-2021-44228 و CVE-2021-45046. هذا هو الكود الذي يشغل https://log4shell.alexbakker.me. إذا كنت ترغب في فحص الكود أو تشغيل نسخة في بيئتك الخاصة، فأنت في المكان الصحيح...

log4j-log4shell-affected

log4j-log4shell-affected 보안 대응자를 위한 CVE-2021-44228일명 Log4shell 또는 Log4j RCE에 영향을 받은 구성 요소 및 앱/벤더 목록입니다. 벤더와 제품을 다음과 같이 분류하는 것이 중요하다고 생각합니다: 1. 내부 위험Internal risk - 내부적으로 위험을 제거하기 위해 가장 먼저 패치해야 할 대상 2. 외부 위험External risk - 귀하의 데이터를 보관하고 있으며 해킹당했을 가능성이 있는 모든 3차/4차 벤더. 패치를 마친 후 모니터링하고 대응해야 할 대상 목록은...

log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

log4j-detector

लॉग4जे-डिटेक्टर स्कैनर जो कमजोर Log4J संस्करणों का पता लगाता है, ताकि टीमों को CVE-2021-44228 गंभीर, CVE-2021-45046, CVE-2021-45105, और CVE-2021-44832 के प्रति अपने जोखिम का आकलन करने में मदद मिल सके। यह पूर्ण फ़ाइल-सिस्टम, जिसमें सभी स्थापित एप्लिकेशन शामिल हैं, की सावधानीपूर्वक जांच करके Log4J...

Ox4Shell

Ox4Shell Deobfuscate Log4Shell payloads with ease. Description Since the release of the Log4Shell vulnerability CVE-2021-44228, many tools were created to obfuscate Log4Shell payloads, making the lives of security engineers a nightmare. This tool intends to unravel the true contents of obfuscated...

Log4J-RCE-Proof-Of-Concept

Log4J-RCE-Proof-Of-Concept CVE-2021-44228 Questa è una proof of concept della RCE di log4j. Ecco alcuni link per la CVE-2021-44228: https://www.lunasec.io/docs/blog/log4j-zero-day https://github.com/advisories/GHSA-jfh8-c2jp-5v3q https://github.com/apache/logging-log4j2/pull/608...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 Questo repository contiene un'applicazione web Spring Boot vulnerabile a CVE-2021-44228, soprannominata Log4Shell. Utilizza Log4j 2.14.1 tramite spring-boot-starter-log4j2 2.6.1 e il JDK 1.8.0181. Esecuzione dell'applicazione Eseguila:...

log4j-shell-poc

log4shell-poc CVE-2021-44228 Proof-of-Concept-Exploit für die Log4j-Sicherheitslücke CVE-2021-44228, auch bekannt als Log4Shell. Dieses Tool generiert eine bösartige Java-Klasse, startet einen LDAP-Referral-Server und stellt das Payload über HTTP bereit, wodurch ein entfernter Angreifer beliebige...

log4j-detect

log4j-detect Einfaches Python 3 Skript zur Erkennung der „Log4j“ Java-Bibliothekssicherheitslücke CVE-2021-44228 für eine Liste von URLs mit Multithreading Das in Python 3 entwickelte Skript „log4j-detect.py“ dient dazu, zu erkennen, ob eine Liste von URLs anfällig für CVE-2021-44228 ist. Dazu...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

vm-homelab-log4shell-assessment

Valutazione delle vulnerabilità e convalida dello sfruttamento — Apache Solr / Log4Shell Laboratorio di gestione delle vulnerabilità a ciclo completo: scansione → prioritizzazione → convalida manuale → rilevamento a livello di rete → remediation → verifica. Target: container Solr 8.11.0 di Vulhub...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Triage: CVE-2021-44228 Log4Shell / Log4j In questo laboratorio, l'obiettivo era fare il triage di un'altra vulnerabilità reale e ben nota, Log4Shell, una delle vulnerabilità più sfruttate degli ultimi anni a causa di quanto fosse diffusa la libreria interessata nel software aziendale. Passo 1:...

log4shell4shell

log4shell4shell Log4j - Multitool. Finden und Beheben möglicher CVE-2021-44228-Schwachstellen - bietet eine vollständige LOG4SHELL-Test-/Angriffsumgebung Funktionen Überprüfen Sie Ihr Linux/Mac/BSD- und Windows-System auf CVE-2021-44228-Schwachstellen Beheben Sie Ihr System, indem Sie die...

checkmk-log4j-scanner

estensione checkmk per il controllo di log4j2 CVE-2021-44228 Questo plugin è un wrapper per logpresso/CVE-2021-44228-Scanner Apache License 2.0 Come funziona Esegui in 5 passaggi: 1. Trova tutti i file .jar, .war, .ear, .aar in modo ricorsivo. 2. Trova la voce...

log4j_scanner

Filesystem log4jscanner per windows e Unix. Scansione per CVE-2021-44228, CVE-2021-45046, CVE-2019-17571, CVE-2021-44832 Richiede almeno Python 2.7. Può essere eseguito come Custom Script Rule di un Audit o tramite un Server Script con Server Automation. Eseguibile anche autonomamente dalla riga ...

log4shell-vulnerable-app

Applicazione vulnerabile di esempio Log4Shell CVE-2021-44228 - modificata due volte Questo repository contiene un'applicazione web Spring Boot vulnerabile a CVE-2021-44228, soprannominata Log4Shell. Utilizza Log4j 2.14.1 tramite spring-boot-starter-log4j2 2.6.1 e il JDK 1.8.0181. Esecuzione...

solar-exploiting-log4j

🔥 Solar Exploiting Log4j – TryHackMe Komplettlösung 📌 Raum: Solar Exploiting Log4j Plattform: TryHackMe Schwierigkeit: Mittel Thema: Log4Shell Log4j-Sicherheitslücke 🧠 Zielsetzung Die Log4j-Sicherheitslücke CVE-2021-44228 ausnutzen, um Remote-Codeausführung zu erlangen und Flags zu erbeuten. 🛠️...