Lucene search
+L

606 matches found

Kitploit
Kitploit
added 2026/09/19 4:42 a.m.8 views

hka-seminar-log4shell

Seminar Paper - Log4Shell Vulnerability Demonstration CVE-2021-44228 Security Notice This repository is intended exclusively for educational and demonstration purposes as part of a security-related seminar paper. Do not use this code in production environments or against systems without explicit...

10CVSS7.3AI score0.99999EPSS
SaveExploits373
Kitploit
Kitploit
added 2026/09/19 4:38 a.m.11 views

log4j2-exploit

Log4Shell CVE-2021-44228 proof of concept Requirement Java JDK/JRE 8 or later version curl exploitable Simple spring boot application that serves a login page with user and password. It logs the user name when POSTed to /. It is not required for the application to log any user provided input...

10CVSS7.4AI score0.99999EPSS
SaveExploits373References2
Kitploit
Kitploit
added 2026/09/19 2:57 a.m.6 views

log4j-scanner-CVE-2021-44228

log4j-scanner CVE-2021-44228 Simple tool for scanning entire directories for attempts of CVE-2021-44228 there are always ways to bypass filters , same goes for the regex patterns...

10CVSS7.6AI score0.99999EPSS
SaveExploits373
Kitploit
Kitploit
added 2026/09/19 1:34 a.m.9 views

exploit-CVE-2021-44228

CVE-2021-44228 – Log4j RCE Unauthenticated About This is a proof-of-concept exploit for Log4j RCE Unauthenticated CVE-2021-44228. This vulnerability affects versions 2.15.0. For more information: https://www.fastly.com/blog/digging-deeper-into-log4shell-0day-rce-exploit-found-in-log4j Contributor...

10CVSS7.5AI score0.99999EPSS
SaveExploits373
Kitploit
Kitploit
added 2026/09/19 1:19 a.m.11 views

Log4Shell-obfuscated-payloads-generator

Log4Shell-obfuscated-payloads-generator Log4Shell-obfuscated-payloads-generator can generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection. The design idea of ​​Log4Shell-obfuscated-payloads-generator Installation root@kitploit: git...

8.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/19 1:15 a.m.10 views

nginx-mitigate-log4shell

nginx-mitigate-log4shell Mitigate log4shell CVE-2021-44228 and CVE-2021-45046 vulnerability attacks using Nginx LUA script Requires the Nginx lua module https://www.nginx.com/resources/wiki/modules/lua/ to be enabled. Use include /path/to/mitigate-log4shell.conf; in the server ... context. Can be...

10CVSS7.6AI score0.99999EPSS
SaveExploits375
Kitploit
Kitploit
added 2026/09/19 1:14 a.m.9 views

log4shell_ioc_ips

j4shelliocips big dump from known log4j/log4shell malicious ip adresses unique and sorted update once a hour only if changes were made! CVE-2021-44228 happy hunting disclaimer This script is parsing a lot of Source so this list maybe has a lot of false positives don't block all ips in your...

10CVSS7.6AI score0.99999EPSS
SaveExploits373References26
Kitploit
Kitploit
added 2026/09/19 1:00 a.m.6 views

CVE-2021-44228-PoC

CVE-2021-44228 Log4Shell Proof of Concept Apache Log4j2 =2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute...

10CVSS8.1AI score0.99999EPSS
SaveExploits373
Kitploit
Kitploit
added 2026/09/19 12:59 a.m.7 views

Log4Shell

log4shell A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters. Supports DNS callback for vulnerability...

9CVSS8AI score0.99977EPSS
SaveExploits40
Kitploit
Kitploit
added 2026/09/19 12:57 a.m.10 views

Log4Pot

Log4Pot A honeypot for the Log4Shell vulnerability CVE-2021-44228. License: GPLv3.0 Features Listen on various ports for Log4Shell exploitation. Detect exploitation in request line and headers. Download exploit payloads recursively. Log to file and Azure blob storage. Usage 1. Install Poetry: cur...

10CVSS7.6AI score0.99999EPSS
SaveExploits373
Kitploit
Kitploit
added 2026/09/19 12:56 a.m.8 views

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit Bash script to remotely identify and/or exploit the Log4j vulnerability. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of the audited...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 12:34 a.m.13 views

Get-log4j-Windows-local

Get-log4j-Windows-local.ps1 Identify all log4j components on a single local windows servers. CVE-2021-44228. A single use copy - see https://github.com/KeysAU/Get-log4j-Windows.ps1 for multi computer. Apache log4j CVE-2021-44228 Script Running: Export: Columns A - I: Continued: Description:...

10CVSS7.8AI score0.99999EPSS
SaveExploits373References1
Kitploit
Kitploit
added 2026/09/19 12:24 a.m.8 views

log4shell-minecraft-demo

Log4Shell CVE-2021-44228 demo de Minecraft Esta demo se utiliza en ferias educativas para dar a los posibles futuros estudiantes una idea del departamento de ciberseguridad de la HTL Villach y de cómo se pueden explotar aplicaciones cotidianas Nota: Esta demo completa usa Minecraft 1.8.8 Atacante...

10CVSS7.7AI score0.99999EPSS
SaveExploits373References1
Kitploit
Kitploit
added 2026/09/19 12:09 a.m.9 views

log4j_checker

Log4jchecker.py CVE-2021-44228 Description This Python3 script tries to look for servers vulnerable to CVE-2021-44228, also known as Log4Shell, a very critical vulnerability found in Log4j2 Java logging library. It doesn't rely on external DNS log servers to verify and validate the vulnerable...

10CVSS7.6AI score0.99999EPSS
SaveExploits373
Kitploit
Kitploit
added 2026/09/19 12:02 a.m.12 views

Log4Shell-PoC-Application

☕ Log4Shell PoC Application Spring framework based web application for proof of concept for log4shell vulnerabilities Install & Launch !Important JDK 1.88u131 in development is required to launch this project Use the provided Dockerfile to build and run the Docker image for poc application...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 11:58 p.m.10 views

CVE-2021-45105

tejas-nagchandi/CVE-2021-45105 Replicating CVE-2021-45105 API root@kitploit: curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT' Output: Attack root@kitploit: curl -I localhost:8080/currentDateTime -H 'Time-Zone: $$::-$::-$$::-$' Output: Logs: Reference: https://vulners.com/cve/CVE-2021-45...

5.9CVSS7.8AI score0.99999EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/18 11:32 p.m.9 views

CVE-2021-44228-PoC

Self-contained lab environment PoC that runs a reverse-shell with Log4Shell CVE-2021-44228 This is a self-contained lab environment that runs the exploit safely, all from docker compose. The affected versions are Apache Log4j =2.0–2.14.1 and the CVE is tracked as CVE-2021-44228 CVSS score: 10.0. ...

10CVSS7.5AI score0.99999EPSS
SaveExploits373References2
Kitploit
Kitploit
added 2026/09/18 11:30 p.m.8 views

f-for-java

f-for-java a project written in go and java i abandoned for CVE-2021-44228 try to fix it if you can XD THE MODULE IN JAVA IS NOT MINE...

10CVSS7.6AI score0.99999EPSS
SaveExploits373
Kitploit
Kitploit
added 2026/09/18 10:24 p.m.13 views

l4s_poc

l4spoc Log4Shell Cve-2021-44228 Proof Of Concept This is a personal project that runs a simple POC that will host an LDAP server and an HTTP server for the Log4Shell exploit. Server The runservers.py will setup a stripped down meterpreter client that will call back to the Metasploit instance pass...

10CVSS7.6AI score0.99999EPSS
SaveExploits373
Kitploit
Kitploit
added 2026/09/18 9:45 p.m.7 views

CVE-2021-44228-log4jVulnScanner-metasploit

CVE-2021-44228-log4jVulnScanner-metasploit open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability preparation POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit cd...

10CVSS7.8AI score0.99999EPSS
SaveExploits373References1
Rows per page
Query Builder