log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

Vm4J

Vm4J VMware 제품의 log4j 취약점을 탐지하는 도구입니다. 작동 방식 먼저 JNDIExploit 서버를 시작합니다. 이 도구를 실행하고 모든 구성을 올바르게 설정합니다. 페이로드를 전송합니다. 스크린샷 지원 VMware HCX VMware vCenter VMware Workspace One 추가 예정 VMware NSX VMware Horizon VMware vRealize Operations Manager 참고 1. 이 프로젝트는 Visual Studio 2022와 .NET Framework 4.5를 사용합니다. ...

log4j_scanner_wrapper

Linuxディレクトリをスキャンしてlog4jの脆弱性CVE-2021-44228を検出するためのラッパーです。 https://github.com/logpresso/CVE-2021-44228-Scanner から取得しています。クレジットはこちらに帰属します。 疑わしい主要ディレクトリの大部分をスキャンし、nfs マウントは除外します。 使用方法 root@kitploit: bash log4jscanner.sh optionaljavapath 著者: Andrew Pomnean および Matt Cengic。...

vcenter-log4j

VMware vCenter log4j 대응 방법 VMware vCenter log4j 취약점 CVE-2021-44228에 대한 대응 스크립트입니다 VMware KB 문서 참조. 2021-12-13 02:09 UTC - 보안 토큰 및 ID 관리 서비스 추가 2021-12-13 12:46 UTC - 6.5용 PSC 클라이언트 추가 - 아래 참조 VMware는 KB 문서에 링크된 Python 스크립트를 공개했습니다. 초기 버전의 문제점은 해결된 것으로 보입니다. 빠른 해결 방법 vCenter에 SSH 접속 shell 실행 스크립트 ...

Log4j-RCE-Exploiter

Log4j-RCE-Exploiter Log4j RCE CVE-2021-44228을 위한 스캐너 설치 설치를 위해 SUPERUSERROOT 권한으로 다음 명령을 실행하세요: root@kitploit: ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh 사용법 root@kitploit: ▶ log4jExploiter -d tesla.com -b 6nuulng8dd2sivtd3kht31s9e0kq8f.burpcollaborator.net -h, --help...

Log4j-JNDIServer

Log4j-JNDIServer Этот проект поможет протестировать уязвимости Log4j CVE-2021-44228/CVE-2021-45046. Установка и сборка Загрузите проект в Intellij Idea Выберите JDK в «Projects Settings» CTRL + ALT + SHIFT + S В «Project Settings» создайте артефакт: «Artifacts» → «Create JAR from Modules» → в «JA...

csp-log4j

csp-log4j CSPレポートURLを検出し、log4jに対して脆弱かどうかをテストします インストール root@kitploit: go install github.com/randomrobbiebf/csp-log4j/ 実行 root@kitploit: csp-log4j -input file.txt -collab something.oastify.com...

log4j-fuzzer

log4j-fuzzer 针对单个目标 root@kitploit: chmod +x log4j 执行上述命令后，直接输入你的目标 root@kitploit: ./log4j YOURTARGETURL YOURREMOTESERVER 针对多个目标 将所有域名、子域名、目录收集到一个列表中 之后直接执行以下命令 root@kitploit: chmod +x log4j 你可以使用 https://github.com/projectdiscovery/interactsh 创建远程服务器，或者尝试使用 DNSLOG.CN root@kitploit: cat...

Search-log4Jvuln-AppScanSTD

AppScan Standard과 웹사이트 목록을 사용하여 log4J 취약점 검색 이 Powershell 스크립트는 웹사이트 목록URLs.txt에 대해 AppScan Standard 스캔을 실행하여 Log4JCVE-2021-44228 취약점만 확인합니다. 프로젝트 구조: 스크립트 실행 후, URLs.txt의 각 줄을 읽고 Log4JCVE-2021-44228 취약점 스캔을 시작합니다. 각 스캔이 완료되면 Log4JResultAnalysis.txt에 결과를 기록합니다. 각 스캔 파일은 Scan 폴더에 있으며 AppScan...

log4j-dork-scanner

Log4j dork 스캐너 이것은 Google dorks를 사용하여 Apache Log4j CVE-2021-44228 영향을 받는 파일을 검색, 스크래핑 및 스캔하는 자동 스크립트입니다. 설치: root@kitploit: git clone https://github.com/JagarYousef/log4j-dork-scanner cd log4j-dork-scanner pip install -r requirments.txt 스캔: root@kitploit: python scanner.py -d YOURSEARCHDORK -n...

log4jtest

はじめに このリポジトリは、Docker と Hashicorp Terraform を使用して log4j の脆弱性を迅速にテストするためにセットアップされています。このテストのすべてのコンポーネントは Docker ネットワーク上の Docker コンテナ内で実行され、'host.docker.internal' 経由でアクセスできます。 クレジット / 免責事項 このテスト環境は、Raxis の素晴らしいブログ記事 https://raxis.com/blog/log4j-exploit を基にしています。 脆弱性のあるアプリケーションとエクスプロイトコードは cyberxml...

pulsar-docker-images-patch-CVE-2021-44228

pulsar 이미지를 Apache Log4J 2.17.1 업그레이드로 패치 다루는 취약점: CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 자세한 내용은 Log4J 보안 취약점 및 업그레이드를 참조하세요. 해결 방법은 Dockerfile을 참조하세요. 패치된 docker 이미지 빌드 및 푸시 사용 예시: root@kitploit: build and tag image docker build...

Astra Linux – Vulnerability in Apache Log4j2

Apache Log4j2 versions 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 have JNDI features that are used in configuration, log messages, and parameters. However, these features do not protect against attacks from controlled LDAP endpoints and other JNDI-related...

Astra Linux – Vulnerability in Apache Log4j2

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not prevent uncontrolled recursion from self-referential lookups. This allowed an attacker with control over the Thread Context Map data to cause a denial of service when a crafted string was interpreted. This issue w...

Security Bulletin: due to the use of Apache Log4j, IBM Transformation Extender Advanced is vulnerable to hostname verification bypass and log injection via CRLF sequences

Summary Apache Log4j is used by IBM Transformation Extender Advanced also known as IBM Standards Processing Engine as part of common utility helpers. Apache Log4j has been updated to address CVE-2026-34477 which causes hostname verification bypass and CVE-2026-34478 which causes log injection via...

Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j

Summary Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The...

Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind

Summary IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Apache Log4j API and jackson-databind. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 Proof-of-Concept Lab An isolated...

Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by Vulnerability in log4j

Summary Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low We have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appende...