POC详情： 221054d0df2525aa1317d8698f0b1653f9e76210

来源
https://github.com/shamo0/CVE-2021-44228
关联漏洞
标题： Apache Log4j 代码问题漏洞 (CVE-2021-44228)
描述：Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。 Apache Log4J 存在代码问题漏洞，攻击者可设计一个数据请求发送给使用 Apache Log4j工具的服务器，当该请求被打印成日志时就会触发远程代码执行。
描述
log4shell (CVE-2021-44228) scanning tool
介绍
# CVE-2021-44228 (log4shell) POC
---------------------
<h1 align="center">
  <img src="https://www.breezyscroll.com/wp-content/uploads/2021/12/log4j-exploit.jpeg" alt="Log4j-RCE-Scanner" width="80%"></a>
  <br>
</h1>

## log4j Scanning tool
This tool will help you identify remote code execution vulnerability (log4j) on your systems.


## Requirements
You will need to install [httpx](https://github.com/projectdiscovery/httpx), [subfinder](https://github.com/projectdiscovery/subfinder), [assetfinder](https://github.com/tomnomnom/assetfinder), [curl](https://github.com/curl/curl) and [amass](https://github.com/OWASP/Amass) in order to run the bash script.

## Installation
1. Simply git clone the repo or download the bash script <code>git clone https://github.com/shamo0/CVE-2021-44228.git</code>
2. change file permissions <code>chmod +x log4j_scanner.sh</code>
3. Run the bash script <code>./log4j_scanner.sh</code>

## Usage: 

<code>./log4j_scanner.sh -l subdomains.txt -i c6wvp482vtc10xx5bhnggdqp5neyyyyyb.interact.sh</code><br/>
<code>./log4j_scanner.sh -d vulnsite.com -i c6wvp482vtc10xx5bhnggdqp5neyyyyyb.interact.sh</code><br/>

<code>-h, --help              Help menu</code><br/>
<code>-l, --url-list          List of domain/subdomain/ip to be used for scanning.</code><br/>
<code>-d, --domain            The domain name to which all subdomains and itself will be checked with Subfinder & Assetfinder.</code><br/>
<code>-i, --inteactshdomain      interactsh domain address.</code><br/>



## References & Acknowledgements
* https://log4shell.huntress.com/
* https://github.com/adilsoybali/Log4j-RCE-Scanner
* https://nvd.nist.gov/vuln/detail/CVE-2021-44228

But also please note that
<h1 align="center">
  <img src="https://pbs.twimg.com/media/FGUwLYCX0AUUKNT.jpg" alt="Log4j-RCE-Scanner" width="80%"></a>
  <br>
</h1>
文件快照

 [4.0K]  /data/pocs/221054d0df2525aa1317d8698f0b1653f9e76210
├── [1.0K]  LICENSE
├── [7.8K]  log4j_scanner.sh
└── [1.8K]  README.md

0 directories, 3 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。