CVE-2021-44228 PoC — Apache Log4j 代码问题漏洞

Source

https://github.com/Phineas09/CVE-2021-44228

Associated Vulnerability

Title:Apache Log4j 代码问题漏洞 (CVE-2021-44228)
Description:Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。 Apache Log4J 存在代码问题漏洞，攻击者可设计一个数据请求发送给使用 Apache Log4j工具的服务器，当该请求被打印成日志时就会触发远程代码执行。

Description

Log4Shell Proof-Of-Concept derived from https://github.com/kozmer/log4j-shell-poc

File Snapshot


 [4.0K]  /data/pocs/82f5b11a9f4b4462a7cd39681551ad025a998760
├── [ 512]  config.sh
├── [4.0K]  Docker-Ldap
│   ├── [ 968]  Dockerfile
│   ├── [4.9K]  exploit_generator.py
│   ├── [4.0K]  java
│   │   └── [ 41M]  marshalsec-0.0.3-SNAPSHOT-all.jar
│   ├── [  18]  requirements.txt
│   └── [  78]  run.sh
├── [4.0K]  Docker-Vuln
│   ├── [ 157]  Dockerfile
│   ├── [4.0K]  log4shell-sources
│   │   ├── [2.5K]  log4shell.iml
│   │   ├── [2.2K]  pom.xml
│   │   └── [4.0K]  src
│   │       └── [4.0K]  main
│   │           ├── [4.0K]  java
│   │           │   └── [4.0K]  com
│   │           │       └── [4.0K]  example
│   │           │           └── [4.0K]  log4shell
│   │           │               ├── [ 226]  log4j.java
│   │           │               └── [1.2K]  LoginServlet.java
│   │           └── [4.0K]  webapp
│   │               ├── [2.4K]  index.jsp
│   │               └── [4.0K]  WEB-INF
│   │                   └── [ 304]  web.xml
│   └── [1.8M]  log4shell.war
├── [1.0K]  LICENSE
└── [4.7K]  Readme.md

12 directories, 16 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!