10 matches found
CVE-2021-45105
tejas-nagchandi/CVE-2021-45105 Reproduciendo CVE-2021-45105 API curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT' Salida: Ataque curl -I localhost:8080/currentDateTime -H 'Time-Zone: $$::-$::-$$::-$' Salida: Registros: Referencia: https://vulners.com/cve/CVE-2021-45105...
log4j-pcap-activity
log4j-pcap-activity(日志4j数据包捕获活动) 一个有趣的活动,使用来自 log4j 漏洞 CVE-2021-44228 的数据包捕获文件 说明 打开 Wireshark 并导入本仓库中的 PCAP 文件:log4j-exploit.pcap。 查看数据包,回答以下问题。 问题 简单 1. 哪些数据包编号包含 TCP 三次握手? 提示:共有 9 个。 2. 对于第一次握手,哪个服务器 IP 和端口正在与哪个其他服务器 IP 和端口建立连接? 3. 对于第二次握手? 4. 与目标端口关联的服务是什么? 5. 对于第三次握手? 6. 查看前 4 个数据包,我们可以确定...
progetto-cybersecurity-log4shell
No d...
Exploit for Use After Free in Microsoft
CVE Analysis & Detection — PoCs, Snort Detection, and Mitigati...
Iranian Hackers Compromised a U.S. Federal Agency's Network Using Log4Shell Exploit
Iranian government-sponsored threat actors have been blamed for compromising a U.S. federal agency by taking advantage of the Log4Shell vulnerability in an unpatched VMware Horizon server. The details, which were shared by the U.S. Cybersecurity and Infrastructure Security Agency CISA, come in...
Cynet Log4Shell Webinar: A Thorough - And Clear - Explanation
Most security practitioners are now aware of the Log4Shell vulnerability discovered toward the end of 2021. No one knows how long the vulnerability existed before it was discovered. The past couple of months have had security teams scrambling to patch the Log4Shell vulnerability found in Apache...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
l4spoc Log4Shell Cve-2021-44228 Proof Of Concept This is a...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
SnapAttack Log4j / CVE-2021-44228 / log4shell Resources Wh...