Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.837exploits catalogados
35.811CVEs com exploração pública
24.695testados em laboratório
77.813 exploits
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware16 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC
log4j mitigation work
CVE-2021-44228CRITICALsob ataqueransomware16 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware16 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC5
Log4shell - Multi-Toolkit. Find, Fix & Test possible CVE-2021-44228 vulneraries - provides a complete LOG4SHELL test/attack environment on shell
CVE-2021-44228CRITICALsob ataqueransomware16 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC1
log4j vulnerability wrapper scanner for CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware16 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
Exploit-DB
Cibele Thinfinity VirtualUI 2.5.41.0 - User Enumeration
CVE-2021-44848webappsmultiple16 dez 2021
In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication reques
43RISCO
abrir
GitHub PoC
This script is used to perform a fast check if your server is possibly affected by CVE-2021-44228 (the log4j vulnerability).
CVE-2021-44228CRITICALsob ataqueransomware16 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC7
Identifying all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC
Aims to find JndiLookup.class in nearly any directory or zip, jar, ear, war file, even deeply nested.
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC2
Log4J Updater Bash Script to automate the framework update process on numerous machines and prevent the CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC
This project is just to show Apache Log4j2 Vulnerability - aka CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC
avirahul007/CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC1
A playground for poking at the Log4Shell (CVE-2021-44228) vulnerability mitigations
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC2
A one-stop repo/ information hub for all log4j vulnerability-related information.
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC3
Test case to check if the Log4Shell/CVE-2021-44228 hotfix will raise any unexpected exceptions
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC
A simple project to check coverage of Log4J vuln CVE-2021-44228 (and related)
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC14
we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(CVE-2021-44228) in their AWS account. The script enables security teams to identify external-facing AWS assets by running the exploit on them, and thus be able to map them and quickly patch them
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC1
VerveIndustrialProtection/CVE-2021-44228-Log4j
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC2
An automated header extensive scanner for detecting log4j RCE CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC3
Very simple Ansible playbook that scan filesystem for JAR files vulnerable to Log4Shell
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC94
A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC3
A Remote Code Execution PoC for Log4Shell (CVE-2021-44228)
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC4
Fast filesystem scanner for CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC
fasanhlieu/CVE-2021-2394
CVE-2021-2394CRITICAL15 dez 2021
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th
70RISCO
abrir
GitHub PoC1
HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter.
CVE-2021-4504315 dez 2021
HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_L
50RISCO
abrir
GitHub PoC3
CrackerCat/CVE-2021-44228-Log4j-Payloads
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC47
An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC
Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
GitHub PoC9
Apache Log4j Zero Day Vulnerability aka Log4Shell aka CVE-2021-44228
CVE-2021-44228CRITICALsob ataqueransomware15 dez 2021
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
anteriorpágina 623 / 2.594próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.