CVE-2021-44228 PoC — Apache Log4j 代码问题漏洞

Source

https://github.com/byteboycn/CVE-2021-44228-Apache-Log4j-Rce

Associated Vulnerability

Title:Apache Log4j 代码问题漏洞 (CVE-2021-44228)
Description:Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。 Apache Log4J 存在代码问题漏洞，攻击者可设计一个数据请求发送给使用 Apache Log4j工具的服务器，当该请求被打印成日志时就会触发远程代码执行。

Readme

### Usage:
1. running RMIServer
2. running Main

File Snapshot


 [4.0K]  /data/pocs/39ef6b5499da1e4a1001903b1ab38ff787a8d5ac
├── [1.1K]  pom.xml
├── [  47]  README.md
└── [4.0K]  src
    └── [4.0K]  main
        └── [4.0K]  java
            ├── [4.0K]  hook
            │   └── [4.0K]  server
            │       ├── [ 197]  EvilObj.java
            │       └── [ 725]  RMIServer.java
            └── [4.0K]  sever
                └── [ 537]  Main.java

6 directories, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!