🔍 Vulnerability Research

A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance.

Purpose: Educational reference and portfolio. All PoC code is for detection and research only.

Index

Structure

Each entry follows a consistent format:

log4shell-cve-2021-44228/
├── README.md             # Project overview
├── analysis.md           # Full writeup
└── references.md         # Cited sources
├── poc/                  # Detection & PoC scripts
    │ 
    ├── scan_log4j.sh         # Recursively scans a host filesystem (or a specified directory) for log4j-core JARs
    │
    ├── audit_logs.sh      # Scans application and web server log files for known Log4Shell payload patterns
    │
    ├── jndi_lookup_demo/     # Safe, self-contained Java project
         │           
         ├── README.md            # Writeup of PoC 3
         │
         ├── jndi_lookup_demo.py        # Python simulation of the full Log4j pipeline:

Methodology

The writeup covers:

• Root cause — what actually broke and how
• Attack timeline — pre-staging, execution, discovery, remediation
• Technical deep-dive — deobfuscated payloads, attack chain, IOCs
• PoC — reproduction or detection scripts
• Lessons learned — systemic issues and mitigations

Maintained by @horrister