log4j2 remote code execution or IP leakage exploit (with examples)

Content to help the community responding to the Log4j Vulnerability Log4Shell CVE-2021-44228

A bare minimum proof-of-concept for Log4j2 JNDI RCE vulnerability (CVE-2021-44228/Log4Shell).

Log4J CVE-2021-44228 Minecraft PoC

Scans and catches callbacks of systems that are impacted by Log4J Log4Shell vulnerability across specific headers.

A small Minecraft server to help players detect vulnerability to the Log4Shell exploit 🐚

nse script to inject jndi payloads

Script for checking log4j version

Scan multiple Docker images with Trivy for a specific CVE

The goal of this project is to demonstrate the log4j cve-2021-44228 exploit vulnerability in a spring-boot setup, and to show how to fix it.

Some siimple checks to see if JAR file is vulnerable to CVE-2021-44228

A script that checks for vulnerable Log4j (CVE-2021-44228) systems using injection of the payload in common HTTP headers.

Log4Shell dockerized full chain

Mitigate log4shell (CVE-2021-44228) vulnerability attacks using Nginx LUA script

A playground for poking at the Log4Shell (CVE-2021-44228) vulnerability mitigations

Script for downloading newest log4j jar files and upgrades it on a Linux-system.

log4j rce test environment and poc

Log4j honeypot to capture payloads within HTTP headers, query parameters and POST requests.

Unzip .jar, .tgz and .zip files recursively

log4shell (CVE-2021-44228) scanning tool