2828 matches found
RS4LOGJ-CVE-2021-44228
RS4LOGJ-CVE-2021-44228 Apache Log4j vulnerability - CVE-2021-44228 instructions for Remote Syslog: Remote Syslog uses the Elasticsearch module to save logging. Effected products: RSv2 RSE RSX RSC is not effected. Check: Check version: root@kitploit: curl -XGET 'http://localhost:9200' Output:...
log4j2-rce
Log4j FilteredObjectInputStream Bypass Pre-auth RCE on any Java service that deserializes LogEvent through Log4j's FilteredObjectInputStream. No credentials needed. Reported as GitHub issue 4255 on August 24, 2026. What it does Log4j ships FilteredObjectInputStream FOIS as a safe deserialization...
Search-log4Jvuln-AppScanSTD
Search log4J vuln using AppScan Standard and a list of websites This Powershell script run AppScan Standard scans against a list of web sites URLs.txt checking just for Log4J CVE-2021-44228 vulnerability. Structure of project: After run the script, it will read each line in URLs.txt and start...
log4j-exploit-builder
log4j-exploit-builder سكربت لإنشاء استغلال log4j CVE-2021-44228 مع دعم لطرق مختلفة للحصول على قشرة عكسية ملاحظة: تمت كتابة الكود بسرعة وسيتم تحسينه في المستقبل...
log4j-dork-scanner
Log4j dork scanner This is an auto script to search, scrape and scan for Apache Log4j CVE-2021-44228 affected files using Google dorks. Installation: root@kitploit: git clone https://github.com/JagarYousef/log4j-dork-scanner cd log4j-dork-scanner pip install -r requirments.txt Scanning:...
Log4Shell
Log4Shell This repository is for Log4j 2021 CVE-2021-44228 Vulnerability demonstration and mitigation. What is Log4Shell? The CVE-2021-44228 / Log4Shell vulnerability consists of injecting vulnerable software with a malicious payload, which will ask Log4J to obtain a value from a third-party...
Log4j_Vulnerability_Demo
Log4jVulnerabilityDemo A simple program to demonstrate how Log4j vulnerability can be exploited CVE-2021-44228 Running the Demo : To start the program, simply run the start.sh on UNIX systems or start.bat on Windows. User input will be read and logged to console using the Log4j framework. By...
Log-4j-scanner
log4j-scan ماسح شامل وآلي ودقيق للعثور على المضيفات المعرضة لثغرة log4j الميزات دعم قوائم عناوين URL. اختبار تخميني Fuzzing لأكثر من 60 ترويسة طلب HTTP وليس فقط 3-4 ترويسات كما في الأدوات السابقة. اختبار تخميني لمعاملات بيانات HTTP POST. اختبار تخميني لمعاملات بيانات JSON. دعم استدعاء DNS لاكتشاف...
4jfinder.github.io
Searchable Log4j database Searchable page for CISA Log4j CVE-2021-44228 Affected Vendor & Software List, maintained by the US Cybersecurity and Infrastructure Security Agency CISA. How to use Download the index.html and cisalist.css files and run from your local computer. Hosted version at...
log4j-polkit-poc
log4j CVE-2021-44228 + polkit CVE-2021-4034 Instance vulnérable pour l'exploit Apache log4j et l'élévation de privilèges via polkit Le fichier vulnérable spring-boot-application.jar a été extrait de cette image docker Le serveur JNDI malveillant a été téléchargé depuis ici et référencé dans cet...
THM---Solar-exploiting-Log-4j
THM---Solar-exploiting-Log-4j This room is based on exploiting the notorious Log4j vulnerability CVE-2021-44228, also referred to as the Log4Shell. The weakness enables attackers to execute a remote code via injection of the malicious payloads into the log messages. TASK 1 – CVE-2021-44228...
EXPLOIT-CVE-2021-44228
CVE-2021-44228 — Log4Shell PoC Lab DISCLAIMER This lab was created exclusively for educational and security research purposes. All traffic occurs within an isolated Docker network. Do not use this material on real systems or without explicit authorization. Misuse may be a crime. Use responsibly...
CVE-2022-41678
Apache ActiveMQ CVE-2022-41678 Exploit Tool Vulnerability Overview Reference document: https://app.nextcyber.cn/courses/41/tasks/580 CVE-2022-41678 is a remote code execution vulnerability in Apache ActiveMQ. This vulnerability allows an attacker to modify Log4j configuration or JFR Java Flight...
CVE-2021-44228
Log4Shell Proof-Of-Concept This repository is a Proof-Of-Concept for CVE-2021-44228 vulnerability. It is derived from This Repo. In this repository I have made an example of a vulnerable application and a demonstration of how to exploit it. Proof-of-concept Components I have modified the upstream...
CVE-2021-44228-Log4Shell-
log4j...
mc-log4j-patcher
mc-log4j-patcher Replaces old vulnerable - CVE-2021-44228 Log4j2 version with the latest one 2.15.0 that contains the JNDI RCE fix. Tested on Spigot 1.12.2, PaperSpigot 1.8.8, PaperSpigot 1.17.1 This is intended to fix servers that are currently unsupported, such as PaperSpigot 1.8.8 Please check...
log4jcheck
Northwave Log4j CVE-2021-44228 जाँचकर्ता शुक्रवार, 10 दिसंबर 2021 को एक नया प्रूफ-ऑफ-कॉन्सेप्ट 1 प्रकाशित किया गया जो जावा लाइब्रेरी 'log4j' 2 में एक रिमोट कोड एक्जीक्यूशन RCE कमजोरी को संबोधित करता है। यह कमजोरी पहले से सॉफ्टवेयर के डेवलपर्स को प्रकट नहीं की गई थी। इस कमजोरी को CVE-2021-44228 3 ...
Log4j_CVE-2021-44228
The Log4j vulnerability, also known as "Log4Shell" or "CVE-2021-44228," is a critical security flaw in the Apache Log4j library. Log4j is a widely used Java-based logging framework that allows developers to log messages from applications to various destinations, such as files, databases, and...
PY-Log4j-RCE-Scanner
Log4j RCE Scanner Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses. Features: It can scan according to the url list you provide. It can scan all of them by finding the subdomains of the domain name you give. It adds the...