POC for detecting the Log4Shell (Log4J RCE) vulnerability.

Last update: Dec 22, 2021

Overview

log4shell-poc-py

POC for detecting the Log4Shell (Log4J RCE) vulnerability.

Run on a system with python3 python3 log4shell-poc.py

pathToTargetFile - containing a list of targets (targets are seperated by newlines)
InteractionURL - the endpoint used to monitor out of band data extraction or interactions, e.g: https://github.com/projectdiscovery/interactsh

Example Output

[1] Testing asset: http://
   
    

[2] Testing asset: http://
    
     

[3] Testing asset: http://
     
      

[4] Testing asset: http://
      
       

[5] Testing asset: http://
       
         [6] Testing asset: http://
        
          [7] Testing asset: http://

Interaction Results

The example output as seen on the interactor due to a the Log4J vulnerability being found in an asset.

;; ANSWER SECTION:

   
    .
    
     .	3600	IN	A	
     
      

;; AUTHORITY SECTION:

      
       .
       
        . 3600 IN NS ns1.
        
         . 
         
          .
          
           . 3600 IN NS ns2.
           
            .

- represents the line number of the target in the target file

Owner

BCC Risk Advisory

GitHub Repository

The backend part of the simple password manager project made for the creative challenge.

SimplePasswordManagerBackend The backend part of the simple password manager project. Your task will be to showcase your creativity on our channel by

5 Dec 28, 2021

ADExplorerSnapshot.py is an AD Explorer snapshot ingestor for BloodHound.

ADExplorerSnapshot.py ADExplorerSnapshot.py is an AD Explorer snapshot ingestor for BloodHound. AD Explorer allows you to connect to a DC and browse L

576 Dec 23, 2022

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr 64bit2key.py

15 Nov 26, 2022

This project is all about building an amazing application that will help users manage their passwords and even generate new passwords for them

An amazing application that will help us manage our passwords and even generate new passwords for us.

1 Jan 23, 2022

USSR-Scanner - USSR Scanner with python

Purposes ? Hey there is abosolutely no need to do this we do it only to irritate

2 Jan 24, 2022

This repository uses a mixture of numbers, alphabets, and other symbols found on the computer keyboard

This repository uses a mixture of numbers, alphabets, and other symbols found on the computer keyboard to form a 16-character password which is unpredictable and cannot easily be memorised.

1 Nov 23, 2021

Python script that sends CVE-2021-44228 log4j payload requests to url list

scan4log4j Python script that sends CVE-2021-44228 log4j payload requests to url list [VERY BETA] using Supply your url list to urls.txt Put your payl

5 Nov 09, 2022

Searches filesystem for CVE-2021-44228 and CVE-2021-45046 vulnerable instances of log4j library, including embedded (jar/war/zip) packaged ones.

33 Jan 04, 2023

Automatically fetch, measure, and merge subscription links on the network, use Github Action

Free Node Merge Introduction Modified from alanbobs999/TopFreeProxies It measures the speed of free nodes on the network and import the stable and hig

52 Jul 16, 2022

This is python script that will extract the functions call in all used DLL in an executable and then provide a mapping of those functions to the attack classes defined and curated malapi.io.

F2Amapper This is python script that will extract the functions call in all used DLL in an executable and then provide a mapping of those functions to

3 Sep 03, 2022

POC for detecting the Log4Shell (Log4J RCE) vulnerability.

Related tags

Overview

log4shell-poc-py

Example Output

Interaction Results

Owner

BCC Risk Advisory

The backend part of the simple password manager project made for the creative challenge.

ADExplorerSnapshot.py is an AD Explorer snapshot ingestor for BloodHound.

Files related to PoC||GTFO 21:21 - NSA’s Backdoor of the PX1000-Cr

This project is all about building an amazing application that will help users manage their passwords and even generate new passwords for them

USSR-Scanner - USSR Scanner with python

This repository uses a mixture of numbers, alphabets, and other symbols found on the computer keyboard

Python script that sends CVE-2021-44228 log4j payload requests to url list

Searches filesystem for CVE-2021-44228 and CVE-2021-45046 vulnerable instances of log4j library, including embedded (jar/war/zip) packaged ones.

Automatically fetch, measure, and merge subscription links on the network, use Github Action

This is python script that will extract the functions call in all used DLL in an executable and then provide a mapping of those functions to the attack classes defined and curated malapi.io.

OpenSource Poc && Vulnerable-Target Storage Box.

Remote control your Greenbone Vulnerability Manager (GVM)

CloudFlare reconnaissance, tries to uncover the IP behind CF.

Security audit Python project dependencies against security advisory databases.

Script Crack Facebook Premium 🚶‍♂

Web Headers Security Scanner

log4j2 passive burp rce scanning tool get post cookie full parameter recognition

Tool To generate Stable Undetected Payload

Dumps the payload.bin image found in Android update images.

A Python & JavaScript Obfuscator made in Python 3.