Catálogo de exploits

pravin-pp/log4j2-CVE-2021-45046

A playground for poking at the Log4Shell (CVE-2021-44228) vulnerability mitigations

avirahul007/CVE-2021-44228

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

This project is just to show Apache Log4j2 Vulnerability - aka CVE-2021-44228

Log4J Updater Bash Script to automate the framework update process on numerous machines and prevent the CVE-2021-44228

Aims to find JndiLookup.class in nearly any directory or zip, jar, ear, war file, even deeply nested.

Fast filesystem scanner for CVE-2021-44228

CrackerCat/CVE-2021-44228-Log4j-Payloads

An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.

Test case to check if the Log4Shell/CVE-2021-44228 hotfix will raise any unexpected exceptions

A simple project to check coverage of Log4J vuln CVE-2021-44228 (and related)

we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(CVE-2021-44228) in their AWS account. The script enables security teams to identify external-facing AWS assets by running the exploit on them, and thus be able to map them and quickly patch them

Very simple Ansible playbook that scan filesystem for JAR files vulnerable to Log4Shell

Log4j 2.15.0 Privilege Escalation -- CVE-2021-45046

fasanhlieu/CVE-2021-2394

Oh no another one

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228

A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

On Thursday (December 9th), a 0-day exploit in the popular Java logging library log4j (version 2) was discovered that results in Remote Code Execution (RCE) by logging a certain string. Given how ubiquitous this library is, the impact of the exploit (full server control), and how easy it is to exploit, the impact of this vulnerability is quite severe. We're calling it "Log4Shell" for short.

Sample docker-compose setup to show how this exploit works

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

municipalparkingservices/CVE-2021-44228-Scanner

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

Tools for investigating Log4j CVE-2021-44228

Details : CVE-2021-44228

Demo project to evaluate Log4j2 Vulnerability | CVE-2021-44228

didoatanasov/cve-2021-44228

CVE-2021-44228