POC详情： be8c31f56f7f6c3d1d8b29b22274efe8361559a8

来源
https://github.com/Koupah/MC-Log4j-Patcher
关联漏洞
标题： Apache Log4j 代码问题漏洞 (CVE-2021-44228)
描述：Apache Log4j是美国阿帕奇（Apache）基金会的一款基于Java的开源日志记录工具。 Apache Log4J 存在代码问题漏洞，攻击者可设计一个数据请求发送给使用 Apache Log4j工具的服务器，当该请求被打印成日志时就会触发远程代码执行。
描述
A singular file to protect as many Minecraft servers and clients as possible from the Log4j exploit (CVE-2021-44228).
介绍
# MC-Log4J-Patcher  
The goal of this project is to provide Minecraft players, and server owners, peace of mind in regards to the recently discovered Log4J exploit (CVE-2021-44228).  
Currently this project looks for any Log4J format strings, not just `jndi`, and either replaces them or stops them from being logged entirely depending on your [configuration](#config).  

See [features](#features), [supported platforms](#supported-platforms), and more below.

I would much appreciate any help from others, whether it be by contributing or by suggesting features, platforms, etc. via an [issue](https://github.com/Koupah/MC-Log4j-Patcher/issues/new).

## Supported Platforms  
 - [Spigot/Bukkit](https://getbukkit.org/download/spigot) (Tested Spigot 1.8.9, 1.12.2)
 - [Bungeecord](https://github.com/SpigotMC/BungeeCord) (Tested Waterfall)


## Planned Platforms
 - Velocity
 - Sponge
 - Forge (I know it should be fixed, but people keep asking me to make a mod anyways)
 - Vanilla/All Clients via Java Agent

## Features

### Spigot
 - Chat & Command filter
 - Item Name filter
 - Player username filter (for offline/bungee servers) (Yes, usernames can be Log4J formats)
 - Mob name filter (Spawning & Renaming)

### Bungee
 - Chat & Command filter
 - Player username filter (Yes, usernames can be Log4J formats)

## Config
 - Customizable messages
 - Toggles for all listeners, individual for each platform

*Specifics need to be filled in*
文件快照

 [4.0K]  /data/pocs/be8c31f56f7f6c3d1d8b29b22274efe8361559a8
├── [1.4K]  README.md
├── [4.0K]  resources
│   ├── [ 136]  bungee.yml
│   └── [ 141]  plugin.yml
└── [4.0K]  src
    └── [4.0K]  club
        └── [4.0K]  koupah
            └── [4.0K]  log4j
                ├── [4.0K]  bukkit
                │   ├── [2.9K]  BukkitPatcher.java
                │   ├── [1.3K]  ListenerPatchers.java
                │   └── [4.0K]  listeners
                │       ├── [1.8K]  ChatPatcher.java
                │       ├── [2.6K]  ItemNamePatcher.java
                │       ├── [1.3K]  MobNamePatcher.java
                │       └── [1.6K]  PlayerNamePatcher.java
                ├── [4.0K]  bungee
                │   ├── [2.5K]  BungeePatcher.java
                │   ├── [1.3K]  ListenerPatchers.java
                │   └── [4.0K]  listeners
                │       ├── [ 338]  ChatPatcher.java
                │       └── [1.7K]  PlayerNamePatcher.java
                ├── [4.0K]  global
                │   ├── [4.0K]  configuration
                │   │   ├── [1.9K]  ConfigEntry.java
                │   │   └── [6.1K]  Config.java
                │   ├── [4.0K]  log4j
                │   │   └── [2.0K]  Log4JFilter.java
                │   ├── [4.0K]  updates
                │   │   └── [3.8K]  UpdateChecker.java
                │   └── [4.0K]  utils
                │       ├── [4.5K]  Formatter.java
                │       ├── [4.4K]  JndiContextPatch.java
                │       ├── [1.4K]  Loggable.java
                │       └── [3.3K]  PUtil.java
                ├── [4.9K]  Patcher.java
                └── [ 333]  PatcherPlatform.java

14 directories, 23 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。