Catálogo de exploits

An awesome curated list of repos for CVE-2021-44228. ``Apache Log4j 2``

A micro lab for CVE-2021-44228 (log4j)

IP addresses exploiting recent log4j2 vulnerability CVE-2021-44228

Known IoCs for log4j framework vulnerability

Lists of affected components and affected apps/vendors by CVE-2021-44228 (aka Log4shell or Log4j RCE). This list is meant as a resource for security responders to be able to find and address the vulnerability

Panyaprach/Prove-CVE-2021-44228

Sample log4j shell exploit

Scan systems and docker images for potential log4j vulnerabilities. Able to patch (remove JndiLookup.class) from layered archives. Will detect in-depth (layered archives jar/zip/tar/war and scans for vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105). Binaries for Windows, Linux and OsX, but can be build on each platform supported by supported Golang.

initial-access

CVE-2021-43798 is a vulnerability marked as High priority (CVSS 7.5) leading to arbitrary file read via installed plugins in Grafana application.

This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability (CVE-2021-43798).

Apache Log4j CVE-2021-44228 漏洞复现

vorburger/Log4j_CVE-2021-44228

initial-access

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

A Nuclei Template for Apache Log4j RCE (CVE-2021-44228) Detection with WAF Bypass Payloads

byteboycn/CVE-2021-44228-Apache-Log4j-Rce

Public IoCs about log4j CVE-2021-44228

Log4Shell CVE-2021-44228 mitigation tester

local

initial-access

initial-access

local

M1ngGod/CVE-2021-44228-Log4j-lookup-Rce

Небольшой мод направленный на устранение уязвимости CVE-2021-44228

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

CVE-2021-44228

A Terraform to deploy vulnerable app and a JDNIExploit to work with CVE-2021-44228

Simple demo of CVE-2021-44228

s4msec/CVE-2007-2447