
HAFNIUM-IOC
A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865

A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865

Zeek package detecting CVE-2021-38647 (OMIGOD) exploit attempts by monitoring OMI/WMI traffic for missing Authorization headers and malicious SOAP…

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

Script to apply official workaround for VMware vCenter log4j vulnerability CVE-2021-44228

Zeek package detecting Apache HTTP Server path traversal/RCE exploits (CVE-2021-41773, CVE-2021-42013) with payload capture and server header…

This module fixes an issue in the kernels filesystem layer (CVE-2021-33909) by kprobe-replacing vulnerable functions during runtime

Filesystem scanner for Log4Shell (CVE-2021-44228) and related CVEs. Detects vulnerable JAR files via hash matching and class presence. Runs…

Splunk SIEM lab simulating and detecting CVE-2021-34527 (PrintNightmare) exploitation using Sysmon, Windows Event logs, and custom SPL detection…

Mitigation for Log4Shell Security Vulnerability CVE-2021-44228

A Smart Log4Shell/Log4j/CVE-2021-44228 Scanner

Bash and PowerShell scripts to scan a local filesystem for Log4j .jar files which could be vulnerable to CVE-2021-44228 aka Log4Shell.

PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs

A collection of IOCs for CVE-2021-44228 also known as Log4Shell

general purpose workaround for the log4j CVE-2021-44228 vulnerability

Scanners for Jar files that may be vulnerable to CVE-2021-44228

Local Bytecode Scanner for the Log4JShell Vulnerability (CVE-2021-44228)

This powershell script is intended to be used by anyone looking to remediate the Log4j Vulnerability within their environment. It can target multiple…

CVE-2021-1675 Detection Info