905 matches found
Tai-e
Tai-e ✨News Release v0.5.4: Tai-e ships with a new frontend, providing faster and more reliable conversion from Java programs to Tai-e IR. Android app analysis is supported through a PacDroid-powered plugin integrated with pointer analysis. Spring DI and WEC analysis is supported through the Spri...
log4j-scanner
log4j-scanner Verifique la vulnerabilidad CVE-2021-44228 Esta prueba no es 100% confiable, pero ayuda con un escaneo rápido Cómo usar: root@kitploit: wget https://raw.githubusercontent.com/codiobert/log4j-scanner/main/log4j-scanner.sh -q -O - |bash...
log4j-exploit-fork-bomb
log4j-exploit-with-fork-bomb 💣💥💀 Proof of Concept: example of launching a fork bomb on a remote server due to vulnerability CVE-2021-44228 1. Create an attacker's LDAP server server module that will serve string and code payloads payload module 2. Create a victim example victim module and pass a...
Sitecore.Solr-log4j-mitigation
Sitecore.Solr-log4j-mitigation CVE-2021-44228 This repository contains a script that you can run on your windows machine to mitigate CVE-2021-44228 by applying the advice as documented on https://solr.apache.org/security.htmlapache-solr-affected-by-apache-log4j-cve-2021-44228 The PowerShell scrip...
log4j-fix-CVE-2021-44228
log4j-fix-CVE-2021-44228 Windows Batch Script to Scan all the local drive and Fix the log4jCVE-2021-44228 impacted jars Below configurations are needed to make it work SET ZIPPATH =C:\PROGRA1\7-Zip\7z.exe set RESULTFILENAM E=log4jimpactedjars set APPLYFIX =FALSE set LOG4JLOGDIR =%temp% ZIPPATH...
CVE-2021-44228_Log4Shell
CVE-2021-44228Log4Shell Test source code for Log4ShellCVE-2021-44228. Step Information 1. Install JDK8 8u191 in virtual machineWindows 10. 2. Copy out\artifacts\POCjar\POC.jar in Windows. 3. Copy JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar in Windows, Get JNDI-Injection-Exploit 4. Run java -jar...
f-for-java
f-for-java a project written in go and java i abandoned for CVE-2021-44228 try to fix it if you can XD THE MODULE IN JAVA IS NOT MINE...
log4j
CVE-2021-44228 a.k.a. LOG4J This is a public repository from Wortell containing information, links, files and other items related to vulnerabilities related to Log4j Due to vulnerabilities in log4j 2.17.0 it is now recommended to patch to version 2.17.1 Knows CVEs CVE| Score| Description...
test-44228
test-44228 A simple example for CVE-2021-44228 Implements two java CLIs, one using log4j v1.x, the other using log4j 2.x to demonstrate the log4shell vulnerability. See also: https://www.lunasec.io/docs/blog/log4j-zero-day/ https://www.oracle.com/security-alerts/alert-cve-2021-44228.html Usage...
log4shell-test-exploit
Test exploit of CVE-2021-44228 log4shell Preparation root@kitploit: Install Nodejs HTTP server npm -g i http-server Build victim app cd victim-app mvn install Compile Trojan cd test-trojan javac Trojan.java Build marshalsec required Java 8 git clone [email protected]:mbechler/marshalsec.git ...
Log4j_CVE-2021-44228
Log4j CVE-2021-44228 Solutions Think about if you actually really require Log4j2 Core. Most likely, your own code or some 3rd-party library you depend on only need Log4j's Logging API façade - but can log to another back-end. You could therefore simply completely exclude the...
Log4jShell-Scan
Overview log4j2 RCE vulnerability CVE-2021-44228 intranet scanner, can be used for vulnerability scanning under the condition of no internet access, helping enterprises quickly discover Log4Shell vulnerabilities. Modified from: https://github.com/fullhunt/log4j-scan JNDIMonitor from:...
cve-2021-44228
cve-2021-44228 This is the mid-term assignment archive of the "Vulnerability Analysis Lab" Junior Fall-Winter at Anhui University. The full document is at https://testgames.me/2024/11/10/cve-2021-44228/...
Log4j2-CVE-2021-44228
CVE-2021-44228 Remote Code Injection In Log4j https://twitter.com/jas502n/status/1468946197629272066 SpringBoot-pom.xml default use : xml org.springframework.boot spring-boot-starter-web root@kitploit: mvn dependency:treejava INFO | | +-...
log4j2-rce-poc
Log4j2 RCE Vulnerability POC A bare minimum proof-of-concept for Log4j2 JNDI Remote-Code-Execution vulnerability CVE-2021-44228. This is intended for educational purposes to help people who are not security researchers to understand how it works and how large the impact is. The POC bypasses the...
docker-log4shell
docker-log4shell Simple Go app / Docker image for playing with the CVE-2021-44228 vulnerability. Hosts a simple file server and an ldap server that provides any classes hosted in the file server: ldap://ip:1389/Hello - http://ip:8080/Hello.class root@kitploit: docker build -t log4shell . docker r...
cve-2021-44228-rce-poc
CVE-2021-44228 Remote Command Execution PoC This repository allows security researchers to experiment with remote code execution by offering an implementation of an attack server that loads a custom exploit on a vulnerable application that contains log4j. ⚠️ The tool is intended for self-assessmen...
Log4shell
Log4J lab Description This is a lab for playing around with the Log4J CVE-2021-44228 Springboot app + Log4J 2.6.1 Usage root@kitploit: docker build . -t mylog && docker run --rm -p 8081:8080 --name mylog-app mylog...
Log4shell
Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...