CVE-2021-44228 PoC — Apache Log4j 代码问题漏洞

Source

https://github.com/Hydragyrum/evil-rmi-server

Associated Vulnerability

Title:Apache Log4j 代码问题漏洞 (CVE-2021-44228)
Description:Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。 Apache Log4J 存在代码问题漏洞，攻击者可设计一个数据请求发送给使用 Apache Log4j工具的服务器，当该请求被打印成日志时就会触发远程代码执行。

Description

An evil RMI server that can launch an arbitrary command. May be useful for CVE-2021-44228

Readme

# evil-rmi-server
An evil RMI server that can launch an arbitrary command. May be useful for CVE-2021-44228 in a local privesc scenario

## Build

`./gradlew bootJar`

## Run

```
Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar [-hV] [-p=<port>]
       <cmd>
An evil RMI Server to help construct and run an arbitrary command.
      <cmd>           The Command to run. Wrap in quotes if there are spaces.
  -h, --help          Show this help message and exit.
  -p, --port=<port>   The port to listen on
  -V, --version       Print version information and exit.
  ```

File Snapshot


 [4.0K]  /data/pocs/492908524b61a889717d8f65beceea7c047b8697
├── [ 594]  build.gradle
├── [ 330]  Dockerfile
├── [4.0K]  gradle
│   └── [4.0K]  wrapper
│       ├── [ 58K]  gradle-wrapper.jar
│       └── [ 200]  gradle-wrapper.properties
├── [5.6K]  gradlew
├── [2.6K]  gradlew.bat
├── [ 578]  README.md
├── [  36]  settings.gradle
└── [4.0K]  src
    └── [4.0K]  main
        └── [4.0K]  java
            └── [4.0K]  thm
                └── [4.0K]  log4shell
                    └── [2.1K]  EvilRMIServerNew.java

7 directories, 9 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!