https://github.com/woodpecker-appstore/log4j-payload-generator

Log4j jndi injects the Payload generator
https://github.com/woodpecker-appstore/log4j-payload-generator

Last synced: about 1 month ago
JSON representation

Log4j jndi injects the Payload generator

• Host: GitHub
• URL: https://github.com/woodpecker-appstore/log4j-payload-generator
• Owner: woodpecker-appstore
• Created: 2021-12-13T13:32:22.000Z (almost 3 years ago)
• Default Branch: master
• Last Pushed: 2021-12-13T13:40:00.000Z (almost 3 years ago)
• Last Synced: 2024-05-13T19:33:47.309Z (4 months ago)
• Language: Java
• Size: 396 KB
• Stars: 482
• Watchers: 5
• Forks: 109
• Open Issues: 2
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - woodpecker-appstore/log4j-payload-generator - Log4j jndi injects the Payload generator (Java)

README

        
## 0x01 简介

`log4j-payload-generator`是 [woodpecker框架](https://github.com/woodpecker-framework/woodpecker-framwork-release/releases) 生产log4 jndi注入漏洞payload的插件。目前可以一键生产以下5类payload。

1. 原始payload

2. {[upper|lower]:x}类型随机混payload

3. {[upper|lower]:x}全混淆payload

4. {::-n}类型随机混淆payload

5. {::-n}类型全混淆payload

![log4j JNDI注入插件payload生成展示](./docs/log4j-payload-generator.png)

## 0x02 参考

* https://github.com/whwlsfb/Log4j2Scan