https://github.com/guerzon/log4shellpoc
Simple Spring Boot application vulnerable to CVE-2021-44228 (a.k.a log4shell)
https://github.com/guerzon/log4shellpoc
jndi-exploit log4j log4j2 penetration-testing proof-of-concept
Last synced: 3 months ago
JSON representation
Simple Spring Boot application vulnerable to CVE-2021-44228 (a.k.a log4shell)
- Host: GitHub
- URL: https://github.com/guerzon/log4shellpoc
- Owner: guerzon
- License: gpl-3.0
- Created: 2021-12-14T20:27:26.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2021-12-17T23:47:41.000Z (over 4 years ago)
- Last Synced: 2025-03-22T22:43:03.506Z (over 1 year ago)
- Topics: jndi-exploit, log4j, log4j2, penetration-testing, proof-of-concept
- Language: Java
- Homepage:
- Size: 835 KB
- Stars: 1
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Simple Spring Boot application vulnerable to CVE-2021-44228 (Log4Shell)
This proof-of-concept application for CVE-2021-44228 (a.k.a log4shell) is a part of my [writeup](https://www.pidnull.io/2021/12/17/CVE-2021-44228-log4j2-analysis-exploit-PoC.html). For the complete exploit details, refer to the writeup.
## Instructions
Run:
```bash
docker run --rm -p 8080:8080 --name log4shell-poc-app ghcr.io/guerzon/log4shellpoc:latest
```
Or build and run:
```bash
docker build . -t log4shellpoc
docker run --rm -p 8080:8080 --name log4shell-poc-app log4shellpoc
```
### Result
## Notes
Spring Boot project inspired by: https://github.com/christophetd/log4shell-vulnerable-app/