Log4Shell

log4shell 一个全自动、准确且全面的扫描器，用于发现易受攻击的 log4j 主机 功能 支持 URL 列表。 对超过 60 个 HTTP 请求头进行模糊测试。 对 HTTP POST 数据参数进行模糊测试。 对 JSON 数据参数进行模糊测试。 支持 DNS 回调以发现和验证漏洞。 WAF 绕过载荷。 公告 Log4J v2.15.0 存在一个补丁绕过，可导致完整的 RCE。此 log4shell 脚本能够可靠地检测 CVE-2021-45046。如果你难以大规模发现和扫描你的基础设施，或难以跟上 Log4J 威胁。 描述 该脚本供安全团队用于扫描其基础设施中的 Log4J...

Log4j-RCE-Exploiter

Log4j-RCE-Exploiter 针对 Log4j RCE CVE-2021-44228 的扫描器 安装 安装时，请以超级用户（ROOT）身份运行以下命令： root@kitploit: ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh 使用 root@kitploit: ▶ log4jExploiter -d tesla.com -b 6nuulng8dd2sivtd3kht31s9e0kq8f.burpcollaborator.net -h, --help Display help -l,...

Log4j-RCE-Scanner

...

MyLog4Shell

MyLog4Shell log4j RCE 漏洞利用检测 你可以使用以下命令和规则来搜索针对 log4j RCE 漏洞 CVE-2021-44228 的漏洞利用尝试。 Grep / Zgrep 此命令在文件夹 /var/log - '/usr/var/log' 及其所有子文件夹的未压缩文件中搜索漏洞利用尝试。 root@kitploit: sudo egrep -I -i -r '$|%7Bjndi:ldaps?|rmi|dns|nis|iiop|corba|nds|http:/^\n+' /var/log 此命令在文件夹 /var/log...

LogJackFix

LogJack Fix 一个用于修复 CVE-2021-44228 Log4j 远程代码执行漏洞的 Spigot 插件，用于保护 Minecraft 客户端。 构建 root@kitploit: gradle build 许可证 基于 GPLv3 许可 版权所有 c 2021 lordpipe 贡献 通过向此仓库提交贡献，我证明： a 该贡献完全或部分由我创作，且我有权根据文件中指明的开源许可证提交；或 b...

PY-Log4j-RCE-Scanner

Log4j RCE Scanner 使用此工具，您可以扫描多个地址上 Apache Log4j 的远程命令执行漏洞 CVE-2021-44228。 功能： 它可以根据您提供的 URL 列表进行扫描。 它可以通过查找您给出的域名的子域来扫描所有内容。 它会将源域名添加为前缀，以确定传入的 DNS 查询来自哪个来源。 要求 httpx curl 如果您想使用域名进行扫描，则必须另外安装 subfinder、assetfinder 和 amass。 -h, --help - 显示帮助 -l, --url-list - 用于扫描的域名/子域/IP 列表。 -d, --domain -...

FreeBSD : Rundeck3 -- Log4J RCE vulnerability (27c822a0-addc-11ed-a9ee-dca632b19f10)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 27c822a0-addc-11ed-a9ee-dca632b19f10 advisory. - Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are...

Opencast < 9.10, 10.x < 10.6 Log4j RCE Vulnerability (GHSA-mf4f-j588-5xm8, Log4Shell)

Opencast is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Cisco Unified Intelligence Center Log4j RCE

According to its self-reported version, Cisco Unified Intelligence Center is affected by a remote code execution vulnerability. - Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Apache Tika 2.x < 2.2.0 Log4j RCE Vulnerability (Log4Shell)

Apache Tika is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Active Check

Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Version Check

Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Judge.me : Log4j RCE on https://judge.me/reviews

Summary: CVE-2021-44228, also named Log4Shell or LogJam, is a Remote Code Execution RCE class vulnerability. If attackers manage to exploit it on one of the servers, they gain the ability to execute arbitrary code and potentially take full control of the system. What makes CVE-2021-44228 especial...

Apache Struts 2.5.x Log4j RCE Vulnerability (Log4Shell) - Version Check

Apache Struts is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...