CVE-2021-44228
Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.
A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.
This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell.
CVE-2021-44228 Response Scripts
log4j2 CVE-2021-44228 POC
Details : CVE-2021-44228
A Java application intentionally vulnerable to CVE-2021-44228
Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam
An All-In-One Pure Python PoC for CVE-2021-44228
Log4Shell (CVE-2021-44228) PoC
CVE-2021-44228 vulnerability study
Provides upgrade and mitigation instructions for Apache Log4j vulnerability CVE-2021-44228 in Remote Syslog products, including version checks and configuration changes for Elasticsearch.
Log4Shell (CVE-2021-44228) docker lab
CVE-2021-44228 demo webapp
Docker-based lab to validate CVE-2021-44228 (Log4Shell) in Java apps, test mitigations, and simulate RCE via LDAP and HTTP payloads.
Log4Shell Demo with AWS
Compiling links of value i find regarding CVE-2021-44228
This project is just to show Apache Log4j2 Vulnerability - aka CVE-2021-44228
Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.
Demonstrates Log4Shell (CVE-2021-44228) exploitation with LDAP server, malicious JNDI payload, and vulnerable Spring Boot application for security testing.
Research into the implications of CVE-2021-44228 in Spring based applications.
Little recap of the log4j2 remote code execution (CVE-2021-44228)
The goal of this project is to demonstrate the log4j cve-2021-44228 exploit vulnerability in a spring-boot setup, and to show how to fix it.
Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).
Proof-of-concept for Log4Shell (CVE-2021-44228) demonstrating JNDI-based remote code execution via LDAP and HTTP servers.
Collection of payloads for exploiting the Log4j remote code execution vulnerability (CVE-2021-44228), including JNDI injection strings and bypass techniques for penetration testing.
A Proof-Of-Concept Exploit for CVE-2021-44228 vulnerability.
A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell
On Thursday (December 9th), a 0-day exploit in the popular Java logging library log4j (version 2) was discovered that results in Remote Code Execution (RCE) by logging a certain string. Given how ubiquitous this library is, the impact of the exploit (full server control), and how easy it is to exploit, the impact of this vulnerability is quite severe. We're calling it "Log4Shell" for short.
Simple demo of CVE-2021-44228
Apache Log4j 2 a remote code execution vulnerability via the ldap JNDI parser.
Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604
A vulnerable Spring Boot application that uses log4j and is vulnerable to CVE-2021-44228, CVE-2021-44832, CVE-2021-45046 and CVE-2021-45105
Docker-based demonstration of CVE-2021-44228 (Log4Shell) exploitation, featuring a vulnerable Java server, malicious LDAP server, and data exfiltration to an attacker-controlled receiver.
Hands-on lab for exploiting and understanding Log4Shell (CVE-2021-44228) using Docker, Kali Linux, Burp Suite and log4j-shell-poc. For teaching and defensive training in controlled lab environments only.
Praktische Demonstration der Log4Shell-Sicherheitslücke (CVE-2021-44228)
Pentesting caja negra: Shellshock (CVE-2014-6271) + Log4Shell (CVE-2021-44228). Escalada a root. Informe ejecutivo y técnico
Script - Workaround instructions to address CVE-2021-44228 in vCenter Server
Log4Shell (CVE-2021-44228) minecraft demo. Used for education fairs
This repository is for Log4j 2021 (CVE-2021-44228) Vulnerability demonstration and mitigation.
OpenIOC rules to facilitate hunting for indicators of compromise
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
PoC RCE Log4j CVE-2021-4428 para pruebas
Curated collection of public Indicators of Compromise (IoCs) for the Log4j vulnerability (CVE-2021-44228), aggregated from multiple sources for threat detection and incident response.
Scanner and proof-of-concept exploit for the Log4Shell vulnerability (CVE-2021-44228) in Apache Log4j, enabling detection and exploitation of remote code execution.
CVE-2021-44228 漏洞复现完整记录（含环境搭建、触发验证）
Curated collection of in-depth vulnerability writeups with full technical analysis, proof-of-concept detection scripts, IOC listings, and remediation guidance for real-world security incidents.
Deliberately vulnerable Apache Solr application (CVE-2021-44228) for practicing Log4Shell exploitation via User-Agent, POST, and admin endpoints. Docker image available for hands-on security training.
This project will help to test the Log4j CVE-2021-44228 vulnerability.
Self-contained lab environment that runs the exploit safely, all from docker compose
Proof-of-concept exploit for the Log4Shell vulnerability (CVE-2021-44228) in Apache Log4j, demonstrating remote code execution via JNDI injection.
CVE-2021-44228 Log4j2 remote code injection exploit with JNDI payload generation, WAF bypass techniques, and practical exploitation walkthrough for penetration testing.
Quick test environment for CVE-2021-44228 Log4j RCE vulnerability with a built-in exploit server and customizable payload execution.
A Proof-Of-Concept for the CVE-2021-44228 vulnerability.
Comprehensive SOC analysis of Log4Shell (CVE-2021-44228) including technical breakdown, detection indicators, remediation strategies, and incident response timeline for critical vulnerability management.
Script en bash que permite identificar la vulnerabilidad Log4j CVE-2021-44228 de forma remota.
Exploits the Log4Shell vulnerability (CVE-2021-44228) in Log4j2 via JNDI injection to achieve remote code execution on vulnerable web applications.
Mass scanner for Log4j CVE-2021-44228 vulnerability with Python-based detection and exploit capabilities for automated security testing.
Educational demonstration of the Log4Shell vulnerability (CVE-2021-44228) with JNDI LDAP payloads for experimental testing on your own systems.
log4shell sample application (CVE-2021-44228)
Educational analysis of CVE-2021-44228 (Log4Shell) with PoC scripts, attack vector breakdown, and mitigation guidance for understanding and testing the critical RCE vulnerability in Apache Log4j.
Java-based proof-of-concept exploit for CVE-2021-44228 (Log4Shell) enabling remote command execution, OS information gathering, and arbitrary executable launch via crafted JNDI lookups.
Hands-on project demonstrating Log4Shell exploitation, detection engineering with Splunk and auditd, and validated remediation in a containerized environment.
Proof-of-concept exploit for CVE-2021-44228 (Log4Shell) with JNDI injection payloads, WAF bypass techniques, and passive scanning integration for Burp Suite.
Simple webapp that is vulnerable to Log4Shell (CVE-2021-44228)
demo project to highlight how to execute the log4j (CVE-2021-44228) vulnerability
Log4Shell Proof of Concept (CVE-2021-44228)
This is a potentially vulnerable Java web application containing Log4j affected by log4shell(CVE-2021-44228).
A Proof of Concept of the Log4j vulnerabilities (CVE-2021-44228) over Java-RMI
Step-by-step TryHackMe walkthrough for exploiting the Log4Shell vulnerability (CVE-2021-44228) to achieve remote code execution and capture flags.
This repository provides a detailed walkthrough of the *Solar Exploiting Log4j room* on TryHackMe, focusing on exploiting the critical Log4Shell vulnerability (CVE-2021-44228). The project demonstrates how attackers can leverage insecure logging mechanisms in Java applications to achieve remote code execution.
Étude technique et mise en œuvre d'un environnement de test pour la faille Apache Log4j (CVE-2021-44228). Contient un Proof of Concept (PoC) Dockerisé et une proposition de mise à jour de PSSI. Pour un objectif de TP
CVE-2021-44228-Apache-Log4j
CVE-2021-4428 复现
Log4j Vulnerability RCE - CVE-2021-44228
Step-by-step tutorial for exploiting Log4j CVE-2021-44228 with Docker-based vulnerable app, JNDIExploit listener, and LDAP payload injection for remote code execution.
Laboratorio automatizado Plug & Play en Docker para auditar y estudiar la vulnerabilidad Log4Shell (CVE-2021-44228)
IP addresses exploiting recent log4j2 vulnerability CVE-2021-44228
Log4j CVE-2021-44228 examples: Remote Code Execution (through LDAP, RMI, ...), Forced DNS queries, ...
Log4j2 CVE-2021-44228 Vulnerability POC in Apache Tomcat
Presents how to exploit CVE-2021-44228 vulnerability.
PoC for CVE-2021-44228.
Proof-of-concept exploit for Log4Shell (CVE-2021-44228) demonstrating remote code execution via JNDI injection, including payload compilation, LDAP server setup, and WAF bypass techniques.
Log4Shell (CVE-2021-44228) is a zero-day vulnerability in Log4j
File-system scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046) by analyzing compiled Java classes, including nested archives. Works on Linux, Windows, and Mac.
Demo of CVE-2021-44228 Log4Shell.
A Terraform to deploy vulnerable app and a JDNIExploit to work with CVE-2021-44228
Log4j RCE - (CVE-2021-44228)
This project files demostrate a proof-of-concept of log4j vulnerability (CVE-2021-44228) on AWS using Terraform Infrastructure-as-a-code means.
Demo to show how Log4Shell / CVE-2021-44228 vulnerability works
Hands-on lab exercise for exploiting Log4Shell (CVE-2021-44228) with JNDI injection, LDAP referral servers, and reverse shell payloads. Includes detection, bypass techniques, and post-exploitation guidance.
Apache Log4j2 CVE-2021-44228 RCE Demo with RMI and LDAP
A vulnerable Java based REST API for demonstrating CVE-2021-44228 (log4shell).
A tool for detect&exploit vmware product log4j(cve-2021-44228) vulnerability.Support VMware HCX/vCenter/NSX/Horizon/vRealize Operations Manager
Dockerized vulnerable web application demonstrating the Log4j CVE-2021-44228 remote code execution vulnerability for educational exploitation and analysis.
A lab demonstration of the log4shell vulnerability: CVE-2021-44228
Technical deep dive into Apache Log4j2 JNDI injection vulnerability. Features static code analysis, patch comparison, attack vectors (LDAP/RMI/DNS), and enterprise mitigation guidance.
This is a proof-of-concept exploit for Log4j RCE Unauthenticated (CVE-2021-44228).
Log4Shell Proof-Of-Concept derived from https://github.com/kozmer/log4j-shell-poc
