Catálogo de exploits

Hot-patch CVE-2021-44228 by exploiting the vulnerability itself.

An All-In-One Pure Python PoC for CVE-2021-44228

CVE-2021-44228，log4j2 burp插件 Java版本，dnslog选取了非dnslog.cn域名

RedDrip7/Log4Shell_CVE-2021-44228_related_attacks_IOCs

A bare minimum proof-of-concept for Log4j2 JNDI RCE vulnerability (CVE-2021-44228/Log4Shell).

A public open sourced tool. Log4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any application. It is able to even find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too! TAG_OS_TOOL, OWNER_KELLY, DC_PUBLIC

Apache Log4j2 CVE-2021-44228 RCE Demo with RMI and LDAP

Script to apply official workaround for VMware vCenter log4j vulnerability CVE-2021-44228

log4j2漏洞复现

An evil RMI server that can launch an arbitrary command. May be useful for CVE-2021-44228

uint0/cve-2021-44228-helpers

gixxyboy/CVE-2021-43798

A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell

Abuse Log4J CVE-2021-44228 to patch CVE-2021-44228 in vulnerable Minecraft game sessions to prevent exploitation in the session :)

Lists of affected components and affected apps/vendors by CVE-2021-44228 (aka Log4shell or Log4j RCE). This list is meant as a resource for security responders to be able to find and address the vulnerability

IP addresses exploiting recent log4j2 vulnerability CVE-2021-44228

CVE-2021-43936 is a critical vulnerability (CVSS3 10.0) leading to Remote Code Execution (RCE) in WebHMI Firmware.

Nmap NSE scripts to check against log4shell or LogJam vulnerabilities (CVE-2021-44228)

pravin-pp/log4j2-CVE-2021-44228

Log4j RCE - (CVE-2021-44228)

Sample log4j shell exploit

Scan systems and docker images for potential log4j vulnerabilities. Able to patch (remove JndiLookup.class) from layered archives. Will detect in-depth (layered archives jar/zip/tar/war and scans for vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105). Binaries for Windows, Linux and OsX, but can be build on each platform supported by supported Golang.

Spring Boot Log4j - CVE-2021-44228 Docker Lab

Panyaprach/Prove-CVE-2021-44228

Poc of log4j2 (CVE-2021-44228)

DiCanio/CVE-2021-44228-docker-example

Dockerized Go app for testing the CVE-2021-44228 vulnerability

Local Bytecode Scanner for the Log4JShell Vulnerability (CVE-2021-44228)

Python script that sends CVE-2021-44228 log4j payload requests to url list

Log4J CVE-2021-44228 Minecraft PoC