Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit Bash script to remotely identify and/or exploit the Log4j vulnerability. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of the audited...

log4shell-scanner

log4shell-scanner A dependency-free, defensive scanner for Log4Shell — finds vulnerable log4j-core jars and JNDI exploit patterns in logs and config. Why this project During my CERT-In rotation I worked on threat identification, containment, remediation and threat hunting — exactly the workflow...

Log4Shell-Scanner

Log4Shell-Scanner Python script to detect Log4Shell Vulnerability CVE-2021-44228...

Metasploit Wrap-Up

Dump Windows secrets from Active Directory This week, our very own Christophe De La Fuente added an important update to the existing Windows Secret Dump module. It is now able to dump secrets from Active Directory, which will be very useful for Metasploit users. This new feature uses the Director...