Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

77.813 exploits

GitHub PoC★ 57

Ansible detector scanner playbook to verify target Linux hosts using the official Red Hat Log4j detector script RHSB-2021-009 Remote Code Execution - log4j (CVE-2021-44228)

CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

相关的复现和文档

CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 1

POC for CVE-2021-44228 within Springboot

CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

Webmin Local File Include (unauthenticated)

CVE-2006-3392—21 dez 2021

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RISCO

GitHub PoC

halencarjunior/grafana-CVE-2021-43798

CVE-2021-43798HIGHsob ataque21 dez 2021

Grafana path traversal

100RISCO

GitHub PoC

Log4j2 CVE-2021-44228 hack demo for a springboot app

CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

Python script to detect Log4Shell Vulnerability CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 7

Decrypt FortiGate configuration secrets

CVE-2019-6693MEDIUMsob ataqueransomware21 dez 2021

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

63RISCO

GitHub PoC★ 33

Scan and patch tool for CVE-2021-44228 and related log4j concerns.

CVE-2021-44228CRITICALsob ataqueransomware21 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

VulnCheck XDB

infoleak

CVE-2019-6693MEDIUMsob ataqueransomware21 dez 2021

Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacke

63RISCO

GitHub PoC★ 1

Bash que instala los sploit CVE-2017-0781 y CVE-2017-0785 y lo necesario para su usos.

CVE-2017-0781—20 dez 2021

A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1

28RISCO

GitHub PoC★ 85

Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-2021-45046)

CVE-2021-45046CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

100RISCO

VulnCheck XDB

initial-access

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

Exploit-DB

WBCE CMS 1.5.1 - Admin Password Reset

CVE-2021-3817CRITICALwebappsphp20 dez 2021

SQL Injection in wbce/wbce_cms

60RISCO

VulnCheck XDB

initial-access

CVE-2019-0708CRITICALsob ataqueransomware20 dez 2021

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISCO

GitHub PoC

offensity/CVE-2019-0708

CVE-2019-0708CRITICALsob ataqueransomware20 dez 2021

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISCO

GitHub PoC★ 38

log4j2 RCE漏洞（CVE-2021-44228)内网扫描器，可用于在不出网的条件下进行漏洞扫描，帮助企业内部快速发现Log4jShell漏洞。

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 2

Script en bash que permite identificar la vulnerabilidad Log4j CVE-2021-44228 de forma remota.

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 5

Vulnerable web application to test CVE-2021-44228 / log4shell and forensic artifacts from an example attack

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 2

Windows Batch Scrip to Fix the log4j-issue-CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

intel-xeon/CVE-2021-44228---detection-with-PowerShell

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

VulnCheck XDB

local

CVE-2021-3156HIGHsob ataque20 dez 2021

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISCO

GitHub PoC

a project written in go and java i abandoned for CVE-2021-44228 try to fix it if you can XD

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 2

log4j2 Log4Shell CVE-2021-44228 proof of concept

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

VulnCheck XDB

local

CVE-2018-3639MEDIUM20 dez 2021

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres

45RISCO

GitHub PoC

bumheehan/cve-2021-44228-log4j-test

CVE-2021-44228CRITICALsob ataqueransomware20 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

VulnCheck XDB

initial-access

CVE-2020-5902CRITICALsob ataqueransomware19 dez 2021

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISCO

GitHub PoC★ 5

Identifying all log4j components across on local windows servers. CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 1

An Inspec profile to check for Log4j CVE-2021-44228 and CVE-2021-45046

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC

kkyehit/log4j_CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware19 dez 2021

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.