ansible-role-log4shell

Rol de Ansible - log4shell ⭐ Danos una estrella en GitHub — ¡nos motiva mucho! Encuentra Log4Shell CVE-2021-44228 en tu sistema Este rol intenta encontrar JAR y WAR en el sistema de archivos y en archivos abiertos lsof ⚠️ Su sistema puede funcionar lentamente durante el escaneo debido a un find en...

THM---Solar-exploiting-Log-4j

THM---Solar-exploiting-Log-4j Esta sala se basa en explotar la notoria vulnerabilidad Log4j CVE-2021-44228, también conocida como Log4Shell. La debilidad permite a los atacantes ejecutar código remoto mediante la inyección de payloads maliciosos en los mensajes de registro. TAREA 1 – INTRODUCCIÓN...

log4j2_CVE-2021-44228

log4j2 Environment Test Usage, Assume Personal Responsibility for Issues My test environment is Java 17. If needed, you can modify and re-import the project yourself. After starting the environment, the address is: http://127.0.0.1:8006/test...

log4shell-cve-2021-44228

🔍 Vulnerability Research A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance. Purpose: Educational reference and portfolio...

CVE-2021-44228

Tai-e for CVE-2021-44228 This a sample project that utilizes Tai-e to identify Log4Shell a.k.a. CVE-2021-44228 vulnerability and its trigger paths Related video in Chinese: https://www.bilibili.com/video/BV1dV411F781 Getting started Clone this repository via Git: root@kitploit: git clone...

log4j2-test

Log4j2 2.14.1 LDAP Remote Code Execution Vulnerability CVE-2021-44228 Verification 🎈 Tested on Spring Boot 2.x environment Vulnerability advisory https://nvd.nist.gov/vuln/detail/CVE-2021-44228 target-server pom.xml : Downgraded Log4j2 version to a vulnerable version root@kitploit: 17 2.14.1...

CVE-2021-44228

CVE-2021-44228 Mass recognition tool for CVE-2021-44228 need to fix Crypto library to work with Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py replace line 77 : t = time.clock with : t = time.perfcounter how to use : sudo python3 192.168.0.0/8 mylog.txt...

log4shell-example

Log4Shell Exploit Test The goal of this project is to demonstrate the log4j cve-2021-44228 exploit vulnerability in a spring-boot setup, and to show how to fix it. This project contains three submodules. One of these has vulnerable code, the other two are patched. How to use this project Run ./mv...

log4j-payload-generator

log4j-payload-generator log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228. Deployment To deploy this project run root@kitploit: sudo git clone https://github.com/yesspider-hacker/log4j-payload-generator.git Running Tests To run tests, run the following...

log4j-vulnerability

Log4Shell CVE-2021-44228 is a zero-day vulnerability in Log4j Log4J Vulnerability Discovered: 24th November 2021 Patched: 6th December 2021 Attack Demo Click below for youtube video Sample application This sample application is spring boot application, and is using log4j as a logging framework, a...

CVE-2021-44228---detection-with-PowerShell

CVE-2021-44228 detection with PowerShell 1 Open automatedscan.ps1, set variable $ResultsCSV and $Directory 2 Save and close the file 3 Open PowerShell as administrator and run the following command: powershell.exe -noprofile -executionpolicy bypass -file .\automatedscan.ps1...

log4j2-rce-recap

Pequeño resumen de la ejecución remota de código en log4j2 CVE-2021-44228 Requisitos maven = 3 java = 8 no ejecutar ldap en 127.0.0.1:1389 Uso Construir con maven. root@kitploit: mvn test El plugin surefire se ejecutará dos veces: ExploitabilityTest demuestra la explotabilidad del error...

log4j-CVE-2021-44228-workaround

log4j-CVE-2021-44228-workaround A. Solution Description This project provides a general purpose workaround for the log4j CVE-2021-44228 vulnerability, which can be used in case you do not have the alternative in short term to re-build your respective project or to patch the log4j-core jars. The...

log4j2021_vul_test

log4j2021vultest Test the CVE https://vulners.com/cve/CVE-2021-44228...

cve-2021-44228-log4j-test

cve-2021-44228-log4j-test Test 1. LDAP Server and Exploit File Download Server 1.1 Running Docker-compose docker-compose.yml root@kitploit: version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han" ROOTPASSWORD: "han" BASEDN:...

Log4j-RCE-Exploiter

Log4j-RCE-Exploiter Scanner for Log4j RCE CVE-2021-44228 Installation For installation, Run the Following command with SUPERUSER ROOT root@kitploit: ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh Usage root@kitploit: ▶ log4jExploiter -d tesla.com -b...

Apache-Log4j-POC

Apache-Log4j-POC CVE-2021-44228 Proof of Concept of apache log4j LDAP lookup vulnerability You can read more about the vulnerability here: https://blog.cloudflare.com/inside-the-log4j2-vulnerability-cve-2021-44228/ How to run the provided ldap server that returns malicious object ? java -jar...

log4j-cve-2021-44228

log4j-cve-2021-44228...

CVE-2021-44228_scanner

File system scanner for CVE-2021-44228 Aims to find JndiLookup.class in nearly any directory or zip, jar, ear, war file, even deeply nested. find-class-files – Clojure implementation should be able to run nearly anywhere Java can run, assuming there's enough disk space. Given a set of file system...

MyLog4Shell

MyLog4Shell log4j RCE Exploitation Detection You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228 Grep / Zgrep This command searches for exploitation attempts in uncompressed files in folder /var/log - '/usr/var/log' and all sub...