Catálogo de exploits

Apache Log4j Zero Day Vulnerability aka Log4Shell aka CVE-2021-44228

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

Replicating CVE-2021-45046

Fast filesystem scanner for CVE-2021-44228

CrackerCat/CVE-2021-44228-Log4j-Payloads

Test case to check if the Log4Shell/CVE-2021-44228 hotfix will raise any unexpected exceptions

Small example repo for looking into log4j CVE-2021-44228

aws-samples/kubernetes-log4j-cve-2021-44228-node-agent

A simple project to check coverage of Log4J vuln CVE-2021-44228 (and related)

Dockerized honeypot for CVE-2021-44228.

initial-access

Aims to find JndiLookup.class in nearly any directory or zip, jar, ear, war file, even deeply nested.

An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.

we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(CVE-2021-44228) in their AWS account. The script enables security teams to identify external-facing AWS assets by running the exploit on them, and thus be able to map them and quickly patch them

A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

A Nuclei template for Apache Solr affected by Apache Log4J CVE-2021-44228

roticagas/CVE-2021-44228-Demo

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

Scanners for Jar files that may be vulnerable to CVE-2021-44228

On Thursday (December 9th), a 0-day exploit in the popular Java logging library log4j (version 2) was discovered that results in Remote Code Execution (RCE) by logging a certain string. Given how ubiquitous this library is, the impact of the exploit (full server control), and how easy it is to exploit, the impact of this vulnerability is quite severe. We're calling it "Log4Shell" for short.

A firewall reverse proxy for preventing Log4J (Log4Shell aka CVE-2021-44228) attacks.

Log4j Shield - fast ⚡, scalable and easy to use Log4j vulnerability CVE-2021-44228 finder and patcher

Demo project to evaluate Log4j2 Vulnerability | CVE-2021-44228

Log4j2 CVE-2021-44228 revshell, ofc it suck!!

Some siimple checks to see if JAR file is vulnerable to CVE-2021-44228

Little recap of the log4j2 remote code execution (CVE-2021-44228)

Endpoint to test CVE-2021-44228 – Log4j 2

municipalparkingservices/CVE-2021-44228-Scanner

Repo containing all info, scripts, etc. related to CVE-2021-44228