Catálogo de exploits

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

Details : CVE-2021-44228

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

Tools for investigating Log4j CVE-2021-44228

didoatanasov/cve-2021-44228

A firewall reverse proxy for preventing Log4J (Log4Shell aka CVE-2021-44228) attacks.

CVE-2021-44228 Response Scripts

ab0x90/CVE-2021-44228_PoC

Log4j Shield - fast ⚡, scalable and easy to use Log4j vulnerability CVE-2021-44228 finder and patcher

municipalparkingservices/CVE-2021-44228-Scanner

On Thursday (December 9th), a 0-day exploit in the popular Java logging library log4j (version 2) was discovered that results in Remote Code Execution (RCE) by logging a certain string. Given how ubiquitous this library is, the impact of the exploit (full server control), and how easy it is to exploit, the impact of this vulnerability is quite severe. We're calling it "Log4Shell" for short.

A Nuclei template for Apache Solr affected by Apache Log4J CVE-2021-44228

Repo containing all info, scripts, etc. related to CVE-2021-44228

Demo project to evaluate Log4j2 Vulnerability | CVE-2021-44228

Check CVE-2021-44228 vulnerability

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

Tools for remediating the recent log4j2 RCE vulnerability (CVE-2021-44228)

Scanners for Jar files that may be vulnerable to CVE-2021-44228

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228

CVE-2021-44228

Grafana8.x 任意文件读取

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

Tool that runs a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046

A lab for playing around with the Log4J CVE-2021-44228

Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.

log4j2 CVE-2021-44228 POC

Amaranese/CVE-2021-34527

LutziGoz/Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228

This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell.