Catálogo de exploits

we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(CVE-2021-44228) in their AWS account. The script enables security teams to identify external-facing AWS assets by running the exploit on them, and thus be able to map them and quickly patch them

A simple project to check coverage of Log4J vuln CVE-2021-44228 (and related)

Test case to check if the Log4Shell/CVE-2021-44228 hotfix will raise any unexpected exceptions

Identifying all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228

A one-stop repo/ information hub for all log4j vulnerability-related information.

A playground for poking at the Log4Shell (CVE-2021-44228) vulnerability mitigations

avirahul007/CVE-2021-44228

This project is just to show Apache Log4j2 Vulnerability - aka CVE-2021-44228

Log4J Updater Bash Script to automate the framework update process on numerous machines and prevent the CVE-2021-44228

Aims to find JndiLookup.class in nearly any directory or zip, jar, ear, war file, even deeply nested.

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

Log4j 2.15.0 Privilege Escalation -- CVE-2021-45046

Small example repo for looking into log4j CVE-2021-44228

i6c/MASS_CVE-2021-41773

Grafana8.x 任意文件读取

Tools for remediating the recent log4j2 RCE vulnerability (CVE-2021-44228)

Booked Scheduler 2.7.5 - Remote Command Execution (RCE) (Authenticated)

Apache Log4j 2 - Remote Code Execution (RCE)

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

Apache Log4j2 2.14.1 - Information Disclosure

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

ab0x90/CVE-2021-44228_PoC

roticagas/CVE-2021-44228-Demo

Simple Spring Boot application vulnerable to CVE-2021-44228 (a.k.a log4shell)

Tools for investigating Log4j CVE-2021-44228

Sample docker-compose setup to show how this exploit works

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228

Demo project to evaluate Log4j2 Vulnerability | CVE-2021-44228

municipalparkingservices/CVE-2021-44228-Scanner

Repo containing all info, scripts, etc. related to CVE-2021-44228