
CVE-2021-44228 investigation toolkit with Log4j RCE PoC, JNDIExploit payload runner, Snort detection rules, and PCAP analysis for red and blue team exercises.
https://nvd.nist.gov/vuln/detail/CVE-2021-44228
log4j.java - modification of [this PoC] (https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce) to run a bunch of payloads from JNDIExploit.
jndi.pcap - a PCAP of each of these payloads being ran.
snort.rules - Snort rules to detect the LDAP and HTTP connections. Pull requests to make the HTTP ones work are appreciated.