roticagas/cve-2021-44228-demoDemo project for testing and proving the Log4Shell (CVE-2021-44228) zero-day exploit, including verification of vulnerable dependencies and multiple patching methods.
This project for prove and testing zero-day log4j exploit
./mvnw dependency:list
A set ENV LOG4J_FORMAT_MSG_NO_LOOKUPS=true
B add vm option -Dlog4j2.formatMsgNoLookups=true
C.1 add properties log4j2.formatMsgNoLookups=true (NOT WORK) C.2 add properties log4j.formatMsgNoLookups=true (NOT WORK)
D update <log4j2.version>2.15.0</log4j2.version>
E in log4j2.xml replace %m with %m{nolookups}
