关联漏洞
描述
Hashes for vulnerable LOG4J versions
介绍
# CVE-2021-44228-Log4Shell-Hashes
Hashes for vulnerable LOG4J versions
Created to help orgs search for this vulnerable versions
https://www.lunasec.io/docs/blog/log4j-zero-day/
Source of the hashes: https://archive.apache.org/dist/logging/log4j/
- ~~Possibly 1.X affected to https://github.com/apache/logging-log4j2/pull/608~~
- Version 1.0 is NOT vulnerable: https://twitter.com/ceki/status/1469449618316533762?s=20
- Detection Rules: https://gist.github.com/Neo23x0/e4c8b03ff8cdf1fa63b7d15db6e3860b
- VMware Vulnerable: https://www.randori.com/blog/cve-2021-44228/
- Proof of Concept JNDI/LDAP server: https://github.com/veracode-research/rogue-jndi
文件快照
[4.0K] /data/pocs/0ad1559f944b0923d171835167ed4441c0d58ec5
├── [ 17K] Log4J-MD5.ioc
├── [3.5K] md5sum.txt
├── [ 658] README.md
├── [3.8K] sha1sum.txt
└── [4.8K] sha256sums.txt
0 directories, 5 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问,请发送邮箱到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
3. 神龙已为您对POC代码进行快照,为了长期维护,请考虑为本地POC付费,感谢您的支持。