Log4Shell-Payloads

🚨 Log4Shell पेलोड संग्रह Log4Shell / Log4J शोषण पेलोड की एक चुनिंदा सूची, जो निम्न को लक्षित करती है: CVE-2021-45046 CVE-2022-42889 🔗 द्वारा @nav1n0x 🔥 वन-लाइनर पेलोड ✅ वनलाइनर 1bash cat vulnerable-hosts.txt | sed 's/https?:////' | xargs -I echo...

nginx-mitigate-log4shell

nginx-mitigate-log4shell Nginx LUA स्क्रिप्ट का उपयोग करके log4shell CVE-2021-44228 और CVE-2021-45046 भेद्यता हमलों को कम करें Nginx lua मॉड्यूल https://www.nginx.com/resources/wiki/modules/lua/ को सक्षम करने की आवश्यकता है। include /path/to/mitigate-log4shell.conf; का उपयोग server ... संदर्भ में...

Log4j-CVE-Detect

Log4J-CVE-Detect इस रिपॉजिटरी में YARA नियमों का एक सेट है जो log4j के उन संस्करणों का पता लगाने के लिए है जो CVE-2021-44228, CVE-2021-45046, और/या CVE-2021-45105 के प्रति संवेदनशील हैं, प्रभावित संस्करणों में दिखाई देने वाली कई विशेषताओं को देखकर। यह उपकरण बाइनरी फ़ाइलों जैसे Docker इमेज, सिस्टम...

Log4Shell-obfuscated-payloads-generator

Log4Shell-obfuscated-payloads-generator Log4Shell-obfuscated-payloads-generator WAF पहचान से बचने के लिए प्राथमिक रूप से अस्पष्ट obfuscated या द्वितीयक रूप से अस्पष्ट CVE-2021-44228 या CVE-2021-45046 पेलोड उत्पन्न कर सकता है। Log4Shell-obfuscated-payloads-generator की डिज़ाइन अवधारणा स्थापना...

log4shell-tools

log4shell.tools log4shell.tools एक उपकरण है जो आपको यह जांचने के लिए एक परीक्षण चलाने की अनुमति देता है कि आपका कोई एप्लिकेशन log4j में हाल ही में हुई कमज़ोरियों से प्रभावित है या नहीं: CVE-2021-44228 और CVE-2021-45046 । यह वह कोड है जो https://log4shell.alexbakker.me को चलाता है। यदि आप कोड का...

log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

log4j-scan

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

PowerShell-Log4J-Scanner

PowerShell-Log4J-Scanner pode encontrar, analisar e corrigir arquivos Log4J devido ao CVE-2021-44228, CVE-2021-45046 site oficial da apache: https://logging.apache.org/log4j/2.x/download.html O script é para PowerShell, deve funcionar no Win10 ou Win11...

log4j-cve-code-search-resources

Uso della ricerca del codice per aiutare a correggere/mitigare log4j CVE-2021-44228 e log4j CVE-2021-45046...

CyberSecurity_CVE-2021-45046

CVE-2021-45046...

Log4Shell

log4shell Ein vollautomatischer, präziser und umfassender Scanner zum Auffinden verwundbarer Log4j-Hosts Funktionen Unterstützung für URL-Listen. Fuzzing für mehr als 60 HTTP-Request-Header. Fuzzing für HTTP-POST-Daten-Parameter. Fuzzing für JSON-Daten-Parameter. Unterstützt DNS-Callback zur...

log4j2-CVE-2021-45046

Applicazione di esempio vulnerabile a Log4j2 CVE-2021-45046 Versioni coinvolte: tutte le versioni dalla 2.0-beta9 alla 2.15.0 Questa applicazione è basata su un'applicazione web Spring Boot vulnerabile a CVE-2021-45046 Usa Log4j 2.14.1 tramite spring-boot-starter-log4j2 2.6.1. Esecuzione...

log4j-scanner

log4j-scanner Ein Log4j-Schwachstellenscanner ist ein automatisierter Scanner, um Log4j-Schwachstellen CVE-2021-44228 und CVE-2021-45046 in Webanwendungen zu finden. Funktionen 1- Er unterstützt mehrere URLs für den Scan 2- Er verfügt über Payloads, die einige WAF umgehen können 3- Er unterstützt...

Log-4j-scanner

log4j-scan Um scanner totalmente automatizado, preciso e abrangente para encontrar hosts vulneráveis ao log4j Recursos Suporte para listas de URLs. Fuzzing em mais de 60 cabeçalhos de requisição HTTP não apenas 3-4 cabeçalhos como em ferramentas anteriores. Fuzzing em parâmetros de dados POST HTT...

CVE-2021-45046-Info

CVE-2021-45046-Info Oh no, un altro POC root@kitploit: $ctx:apiversion - %dyyyy-MM-dd HH:mm:ss %-5p %c1:%L - %mnolookups%n COLLEGAMENTI https://nvd.nist.gov/vuln/detail/CVE-2021-45046 https://www.datadoghq.com/blog/log4j-log4shell-vulnerability-overview-and-remediation/...

log4shell-rex

Log4Shell-Rex The following RegEx was written in an attempt to match indicators of a Log4Shell CVE-2021-44228 and CVE-2021-45046 exploitation. If you run a version from pre 2021/12/21, it's highly recommended to test and update. I've removed some quirks and enhanced performance. The Regex aims...

log4j-samples

log4j-samples Esempi di versioni della libreria log4j per aiutare gli scanner / rilevatori di log4j incluso il nostro log4j-detector a migliorare la loro accuratezza nel rilevamento di CVE-2021-45046 e CVE-2021-44228. Gli esempi includono jar shaded, uber jar, jar eseguibili spring-boot, jar dent...

log4jjndilookupremove

log4jjndilookupremove Um script simples para remover Log4J JndiLookup.class de jars em um diretório específico. Este script pode ser usado para resolver temporariamente os CVEs CVE-2021-45046 e CVE-2021-44228, até que a aplicação possa ser reempacotada com uma versão adequada do Log4J. Uso Em Lin...

log4j2_vul_local_scanner

Scanner Locale per Vulnerabilità Log4j2 CVE-2021-45046 Script di rilevamento locale per la vulnerabilità Log4j, scansiona tutti i processi java sull'host, verifica se è stato introdotto un jar log4j-core vulnerabile e se è possibile un attacco remoto di esecuzione codice CVE-2021-45046. Carica il...

Log4j_scan_Advance

log4j-scan Um scanner totalmente automatizado, preciso e extenso para encontrar hosts log4j vulneráveis Recursos Suporte para listas de URLs. Fuzzing para mais de 60 cabeçalhos de requisição HTTP não apenas 3-4 cabeçalhos como em ferramentas vistas anteriormente. Fuzzing para parâmetros de dados...