Catálogo de exploits

Log4Shell Proof of Concept (CVE-2021-44228)

Log4shell - Multi-Toolkit. Find, Fix & Test possible CVE-2021-44228 vulneraries - provides a complete LOG4SHELL test/attack environment on shell

Detect and fix log4j log4shell vulnerability (CVE-2021-44228)

log4shell (CVE-2021-44228) scanning tool

This Log4j RCE exploit originated from https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce

This script is used to perform a fast check if your server is possibly affected by CVE-2021-44228 (the log4j vulnerability).

log4j vulnerability wrapper scanner for CVE-2021-44228

aws-samples/kubernetes-log4j-cve-2021-44228-node-agent

we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(CVE-2021-44228) in their AWS account. The script enables security teams to identify external-facing AWS assets by running the exploit on them, and thus be able to map them and quickly patch them

Small example repo for looking into log4j CVE-2021-44228

Dockerized honeypot for CVE-2021-44228.

VerveIndustrialProtection/CVE-2021-44228-Log4j

A Remote Code Execution PoC for Log4Shell (CVE-2021-44228)

A honeypot for the Log4Shell vulnerability (CVE-2021-44228).

Data we are receiving from our honeypots about CVE-2021-44228

A scanner and a proof of sample exploit for log4j RCE CVE-2021-44228

A simple project to check coverage of Log4J vuln CVE-2021-44228 (and related)

Test case to check if the Log4Shell/CVE-2021-44228 hotfix will raise any unexpected exceptions

An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.

Aims to find JndiLookup.class in nearly any directory or zip, jar, ear, war file, even deeply nested.

Fast filesystem scanner for CVE-2021-44228

CrackerCat/CVE-2021-44228-Log4j-Payloads

initial-access

HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter.

initial-access

i6c/MASS_CVE-2021-41773

Apache Log4j Zero Day Vulnerability aka Log4Shell aka CVE-2021-44228

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

Identifying all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228

initial-access