Log4jPatcher

Log4jPatcher Una mitigación basada en un agente Java para exploits JNDI de Log4j2. Este agente emplea 2 parches: Deshabilitar todas las conversiones de Lookup en versiones de Log4j compatibles en org.apache.logging.log4j.core.pattern.MessagePatternConverter estableciendo noLookups en true en el...

Log4j-check

Log4j-check Soporte de bypass de RC1 Plugin de escaneo de burp para Log4j, CVE-2021-44228, soporta bypass de RC1, soporta tipo de datos JSON, soporta dnslog.cn y DNS incorporado de Burp, se puede combinar con JNDIExploit para generar payloads. Modificación realizada sobre el plugin fastjson de...

cve-2021-44228

CVE-2021-44228 https://nvd.nist.gov/vuln/detail/CVE-2021-44228 log4j.java - modificación de este PoC https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce para ejecutar un montón de payloads de JNDIExploit. jndi.pcap - una PCAP de cada uno de estos payloads ejecutándose. snort.rules -...

ldap-swak

LDAP Swiss Army Knife Multi-function LDAP server utility. Quickly setup LDAP server for testing purposes, MitM proxies for intercepting plaintext or forwarding NTLM credentials or exploit various Java JNDI/LDAP Client vulnerabilities. Author: Moritz Bechler [email protected] Project...

EUVD-2003-1280

Malware in sbrugna...

CVE-2022-41272

An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search UDS of SAP NetWeaver Process Integration PI - version 7.50 and make use of an open naming and directory API to access services which can be used to perform unauthorized...

PT-2021-5169

Name of the Vulnerable Software and Affected Versions Apache Log4j2 versions 2.0-beta9 through 2.15.0 Apache Log4j2 version 2.16.0 and later are not affected, as the vulnerable functionality has been completely removed. Description The vulnerability in Apache Log4j2 is related to the JNDI feature...