Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.655exploits catalogados
39.248CVEs com exploração pública
24.695testados em laboratório
83.655 exploits
GitHub PoC★ 1
log4j version 1 with a patch for CVE-2021-44228 vulnerability
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 4
A singular file to protect as many Minecraft servers and clients as possible from the Log4j exploit (CVE-2021-44228).
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 6
Mass Check Vulnerable Log4j CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
tobiasoed/log4j-CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 19
Log4j Exploit Detection Logic for Zeek
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 3
Public IOCs about log4j CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 11
Find Log4Shell CVE-2021-44228 on your system
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 2
taurusxin/CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
The goal of this project is to demonstrate the log4j cve-2021-44228 exploit vulnerability in a spring-boot setup, and to show how to fix it.
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
tica506/Siem-queries-for-CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2021-42278HIGHsob ataqueransomware13 dez 2021
Active Directory Domain Services Elevation of Privilege Vulnerability
93RISCO
abrir ↗
GitHub PoC★ 6
This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell.
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 79
Nmap Log4Shell NSE script for discovery Apache Log4j RCE (CVE-2021-44228)
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC
LutziGoz/Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2021-42287HIGHsob ataqueransomware13 dez 2021
Active Directory Domain Services Elevation of Privilege Vulnerability
93RISCO
abrir ↗
GitHub PoC★ 291
PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2021-42287HIGHsob ataqueransomware13 dez 2021
Active Directory Domain Services Elevation of Privilege Vulnerability
93RISCO
abrir ↗
GitHub PoC
Log4Shell A test for CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2021-42287HIGHsob ataqueransomware13 dez 2021
Active Directory Domain Services Elevation of Privilege Vulnerability
93RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 2
CVE-2021-44228 - Apache log4j RCE quick test
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-36260CRITICALsob ataque13 dez 2021
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
GitHub PoC★ 86
Tool that runs a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046
CVE-2021-44228CRITICALsob ataqueransomware13 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗
← anteriorpágina 721 / 2.789próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.