log4j2-bugmaker

Log4j2-BugMaker CVE-2021-44228 Log4Shell Vulnerability Demonstration Project This is a demonstration project for learning and researching the Log4j2 remote code execution vulnerability Log4Shell. ⚠️ Safety Warning This project is intended for security research and educational purposes only. Do not...

CVE-2021-44228_scanner

File system scanner for CVE-2021-44228 Aims to find JndiLookup.class in nearly any directory or zip, jar, ear, war file, even deeply nested. find-class-files – Clojure implementation should be able to run nearly anywhere Java can run, assuming there's enough disk space. Given a set of file system...

CVE-2021-44228

Log4Shell POC CVE-2021-44228 The scope of this repository is to provide all the components needed to exploit CVE-2021-44228, nicknamed Log4Shell, and to show how to exploit it. The ingredients needed to exploit this vulnerability are the following: 1. An LDAP Server that will redirect the...

Log4j-RCE

Log4j-RCE Log4j RCE - CVE-2021-44228 How To Run? root@kitploit: php log4j.php https://1337.com Requirements PHP CURL PAYLOAD DNS LOG Collaborator Burpsuite or use dnslog.cn List Payload root@kitploit: $ctx:loginId $map:type $filename $date:MM-dd-yyyy $docker:containerId $docker:containerName...

log4shell-finder

log4shell-finder - Fastest file system scanner for log4j instances Python port of https://github.com/mergebase/log4j-detector log4j-detector is copyright C Copyright 2021 Mergebase Software Inc. https://mergebase.com/ Licensed via GPLv3. Motivation for porting to Python was to improve perfomance,...

CVE-2021-44228

CVE-2021-44228 Mass recognition tool for CVE-2021-44228 need to fix Crypto library to work with Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py replace line 77 : t = time.clock with : t = time.perfcounter how to use : sudo python3 192.168.0.0/8 mylog.txt...

log4fix

log4fix This tool is to detect and fix the log4j log4shell vulnerability CVE-2021-44228 by looking and removing the JndiLookup class from .jar/.war/.ear files with zero dependencies for free. This tool has been tested on: - Linux 32bit and 64 bit - Windows 32 bit and 64 bit - OpenBSD 64 bit This...

Log4Shell-obfuscated-payloads-generator

Log4Shell-obfuscated-payloads-generator Log4Shell-obfuscated-payloads-generator can generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection. The design idea of ​​Log4Shell-obfuscated-payloads-generator Installation root@kitploit: git...

Log4j-JNDIServer

Log4j-JNDIServer This project will help to test the Log4j CVE-2021-44228/CVE-2021-45046 vulnerabilities. Installation and Building Load the project on Intellij Idea Select JDK in "Projects Settings" CTRL + ALT + SHIFT + S In "Project Settings", create the Artifact - "Artifacts" - "Create JAR from...

log4j_checker

Log4jchecker.py CVE-2021-44228 Description This Python3 script tries to look for servers vulnerable to CVE-2021-44228, also known as Log4Shell, a very critical vulnerability found in Log4j2 Java logging library. It doesn't rely on external DNS log servers to verify and validate the vulnerable...

log4j-filescan

████████████████▀███████████████████████████████████████████████████████████████████ █▄─▄███─▄▄─█─▄▄▄▄█░█░████▄─▄█▀▀▀▀▀██▄─▄▄─█▄─▄█▄─▄███▄─▄▄─█─▄▄▄▄█─▄▄▄─██▀▄─██▄─▀█▄─▄█ ██─██▀█─██─█─██▄─█▄▄░██─▄█─██████████─▄████─███─██▀██─▄█▀█▄▄▄▄─█─███▀██─▀─███─█▄▀─██...

chk_log4j

chklog4j - Tool to find jar files which are vulnerable to log4j CVE-2021-44228. Install 1. git clone https://github.com/gcmurphy/chklog4j 2. cd chklog4j && cargo install --path . Usage The tool only checks a single file so it is best combined with something like fd. root@kitploit: $ fd -a -e jar ...

Log4j-CVE-2021-44228

Log4j-CVE-2021-44228 Log4j リモートコードインジェクション Apache Log4j 2.x 2.15.0-rc2...

log4j2-CVE-2021-44228

Log4j2 脆弱性サンプルアプリケーション CVE-2021-44228 影響を受けるバージョン: 2.0-beta9 から 2.14.1 までの全バージョン このアプリケーションは、CVE-2021-44228 の脆弱性を持つ Spring Boot Web アプリケーションをベースにしています。 これは Log4j 2.14.1 を使用しています spring-boot-starter-log4j2 2.6.1 経由。 アプリケーションの実行 実行方法: root@kitploit: Import the project in Java IDE as a maven project...

XSYS-Log4J2Shell-Ex

XSYS-Log4J2Shell-Ex CVE-2021-44228 log4j2shell PoC as part of a security research for a vulnerability patch Overview root@kitploit: In this repository I will cover several topics and implementations which provide a PROOF OF CONCEPT regarding the Log4J 2.17.0 vulnerability . The main goal is to...

Log4j-CVE-Detect

Log4J-CVE-Detect このリポジトリには、CVE-2021-44228、CVE-2021-45046、または CVE-2021-45105 に対して脆弱な log4j のバージョンを検出するための YARA ルール一式が含まれています。影響を受けるバージョンに現れるいくつかの特徴を探すことで検出を行います。 このツールは、Docker イメージ、システムパッケージ、ファイルシステムイメージ、さらにはインストールメディアなどのバイナリファイルに対して再帰的に動作します。対応しているファイル形式の完全なリストについては、「どのように動作するのか？」のセクションを参照してください。...

log4j2-rce-recap

Little recap of the log4j2 remote code execution CVE-2021-44228 Requirements maven = 3 java = 8 no running ldap on 127.0.0.1:1389 Usage Build with maven. root@kitploit: mvn test The surefire plugin will be executed two times: ExploitabilityTest proofs the expolitability of the bug. MitigationTest...

log4j-vulnerability

LOG4J 脆弱性 CVE-2021-44228 の脆弱性を悪用する方法を示す Java ベースのプロジェクトです。 https://user-images.githubusercontent.com/13152452/147803050-458593e9-4b54-4e1f-ba07-802866b9b43e.mp4 必要条件 Linux ベースのオペレーティングシステム: 私は Ubuntu Desktop 20.10 64 bits を使用しました。 OpenJDK 17.0.1: 悪用プログラムをビルドするために必要です。新しいバージョンでも動作する可能性があります。 Oracl...

Log4j2-RCE

Log4j2-RCE Log4j2 CVE-2021-44228 Reproduction and Echo Exploit...

Log4j-Windows-Scanner

Log4j-Windows-Scanner CVE-2021-44228 vulnerability in Apache Log4j library | Log4j vulnerability scanner on Windows machines. How does it work It detects the vulnerable versions of log4j by following the folders in the C Directory. When it exposes vulnerable files, it reveals ".TXT" files as...