log4shell-poc-py
POC for detecting the Log4Shell (Log4J RCE) vulnerability.
Run on a system with python3 python3 log4shell-poc.py
pathToTargetFile- containing a list of targets (targets are seperated by newlines)InteractionURL- the endpoint used to monitor out of band data extraction or interactions, e.g: https://github.com/projectdiscovery/interactsh
Example Output
[1] Testing asset: http://
[2] Testing asset: http://
[3] Testing asset: http://
[4] Testing asset: http://
[5] Testing asset: http://
[6] Testing asset: http://
[7] Testing asset: http://
Interaction Results
The example output as seen on the interactor due to a the Log4J vulnerability being found in an asset.
;; ANSWER SECTION:
.
. 3600 IN A
;; AUTHORITY SECTION:
.
. 3600 IN NS ns1.
.
.
. 3600 IN NS ns2.
.
1 Oct 30, 2021
3.5k Jan 09, 2023
1 Nov 26, 2021
30 Nov 27, 2022
2 Mar 15, 2022
1 Dec 31, 2021
567 Dec 30, 2022
3 Jan 08, 2022
66 Dec 08, 2022
11 Sep 04, 2022
6 Nov 14, 2022
1 Dec 28, 2021
43 Dec 23, 2022
22 Oct 17, 2022
172 Nov 17, 2022
1 Dec 29, 2021
1 Jan 11, 2022
2.8k Jan 03, 2023
13 Dec 08, 2022
2 Nov 24, 2021