Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

cve-2021-44228-minecraft-poc — Log4J CVE-2021-44228 Minecraft PoC | Kitploit

GitHub/mrlnstk/cve-2021-44228-minecraft-poc

Vulnerability Analysis Exploitation Web Application Exploitation Penetration Testing Payload Development

mrlnstk/cve-2021-44228-minecraft-poc

cve-2021-44228-minecraft-poc

Log4J CVE-2021-44228 Minecraft PoC

View Repository

54 years ago

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

CVE-2021-44228 in Minecraft

Java 16
Paper server build #397
Minecraft 1.17.1

Exploitation

In Java 16 only deserialization attacks work by default using log4j. To exploit this there needs to be a vulnerable serializable class in the classpath. In the current state of this repository the server will only send a serialized string object. If you found a vulnerable serializable class feel free to create a pull request.