Exploit catalog

Test case to check if the Log4Shell/CVE-2021-44228 hotfix will raise any unexpected exceptions

A simple project to check coverage of Log4J vuln CVE-2021-44228 (and related)

we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(CVE-2021-44228) in their AWS account. The script enables security teams to identify external-facing AWS assets by running the exploit on them, and thus be able to map them and quickly patch them

CVE-2021-44228 demo webapp

CrackerCat/CVE-2021-44228-Log4j-Payloads

Scans for Log4j versions effected by CVE-2021-44228

Data we are receiving from our honeypots about CVE-2021-44228

i6c/MASS_CVE-2021-41773

A scanner and a proof of sample exploit for log4j RCE CVE-2021-44228

Details : CVE-2021-44228

didoatanasov/cve-2021-44228

CVE-2021-44228

municipalparkingservices/CVE-2021-44228-Scanner

Tools for investigating Log4j CVE-2021-44228

On Thursday (December 9th), a 0-day exploit in the popular Java logging library log4j (version 2) was discovered that results in Remote Code Execution (RCE) by logging a certain string. Given how ubiquitous this library is, the impact of the exploit (full server control), and how easy it is to exploit, the impact of this vulnerability is quite severe. We're calling it "Log4Shell" for short.

CVE-2021-44228 Response Scripts

Repo containing all info, scripts, etc. related to CVE-2021-44228

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

Grafana8.x 任意文件读取

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228

Sample docker-compose setup to show how this exploit works

Log4j2 CVE-2021-44228 revshell, ofc it suck!!

Scanners for Jar files that may be vulnerable to CVE-2021-44228

Some siimple checks to see if JAR file is vulnerable to CVE-2021-44228

roticagas/CVE-2021-44228-Demo

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

Demo project to evaluate Log4j2 Vulnerability | CVE-2021-44228

A firewall reverse proxy for preventing Log4J (Log4Shell aka CVE-2021-44228) attacks.