Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

13.937 exploits

GitHub PoC★ 38

log4j2 RCE漏洞（CVE-2021-44228)内网扫描器，可用于在不出网的条件下进行漏洞扫描，帮助企业内部快速发现Log4jShell漏洞。

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 2

Script en bash que permite identificar la vulnerabilidad Log4j CVE-2021-44228 de forma remota.

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

intel-xeon/CVE-2021-44228---detection-with-PowerShell

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 5

Vulnerable web application to test CVE-2021-44228 / log4shell and forensic artifacts from an example attack

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 65

CVE-2021-40444

CVE-2021-40444HIGHsob ataqueransomware19 dez 2021

Microsoft MSHTML Remote Code Execution Vulnerability

100RISCO

GitHub PoC

kkyehit/log4j_CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 7

Demo to show how Log4Shell / CVE-2021-44228 vulnerability works

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 5

Identifying all log4j components across on local windows servers. CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 1

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 4

Vulnerability analysis, patch management and exploitation tool forCVE-2021-44228 / CVE-2021-45046 / CVE-2021-4104

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 106

Exploiting CVE-2021-44228 in vCenter for remote code execution and more.

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 8

A Proof of Concept of the Log4j vulnerabilities (CVE-2021-44228) over Java-RMI

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 1

An Inspec profile to check for Log4j CVE-2021-44228 and CVE-2021-45046

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

Log4Shell (CVE-2021-44228) docker lab

CVE-2021-44228CRITICALsob ataqueransomware18 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

Self-contained lab environment that runs the exploit safely, all from docker compose

CVE-2021-44228CRITICALsob ataqueransomware18 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

An attempt to understand the log4j vulnerability by looking through the code

CVE-2021-44228CRITICALsob ataqueransomware18 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

A scanning suite to find servers affected by the log4shell flaw (CVE-2021-44228) with example to test it

CVE-2021-44228CRITICALsob ataqueransomware18 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

can find, analyse and patch Log4J files because of CVE-2021-44228, CVE-2021-45046

CVE-2021-44228CRITICALsob ataqueransomware18 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

This is a showcase how the Log4J vulnerability (CVE-2021-44228) could be explored. This code is safe to run, but understand what it does and how it works!

CVE-2021-44228CRITICALsob ataqueransomware18 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 1

A fun activity using a packet capture file from the log4j exploit (CVE-2021-44228)

CVE-2021-44228CRITICALsob ataqueransomware18 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 194

shmilylty/cve-2021-22005-exp

CVE-2021-22005CRITICALsob ataqueransomware18 dez 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RISCO

GitHub PoC★ 1

ludy-dev/cve-2021-45046

CVE-2021-45046CRITICALsob ataqueransomware18 dez 2021

Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

100RISCO

GitHub PoC

A simple script to remove Log4J JndiLookup.class from jars in a given directory, to temporarily protect from CVE-2021-45046 and CVE-2021-44228.

CVE-2021-45046CRITICALsob ataqueransomware17 dez 2021

Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

100RISCO

GitHub PoC

CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware17 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

Log4Shell (CVE-2021-44228): Descrizione, Exploitation e Mitigazione

CVE-2021-44228CRITICALsob ataqueransomware17 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

Scanner for the Log4j vulnerability dubbed Log4Shell (CVE-2021-44228)

CVE-2021-44228CRITICALsob ataqueransomware17 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 2

Script - Workaround instructions to address CVE-2021-44228 in vCenter Server

CVE-2021-44228CRITICALsob ataqueransomware17 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

PoC RCE Log4j CVE-2021-4428 para pruebas

CVE-2021-44228CRITICALsob ataqueransomware17 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

Log4Shell mitigation (CVE-2021-44228) - search and remove JNDI class from *log4j*.jar files on the system with Powershell (Windows)

CVE-2021-44228CRITICALsob ataqueransomware17 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

OGNL Injection in Confluence server version < 7.12.5

CVE-2021-26084CRITICALsob ataqueransomware17 dez 2021

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.