Log4j command generator: Generate commands for CVE-2021-44228

Last update: Jan 03, 2022

Overview

Log4j command generator

Generate commands for CVE-2021-44228.

Description

The vulnerability exists due to the Log4j processor's handling of log messages. Apache Log4j2 versions between 2.0 and 2.14.1 do not protect against attacker-controlled LDAP (Lightweight Directory Access Protocol) and other JNDI (Java Naming and Directory Interface) related endpoints. If an attacker sends a specially crafted message, this may result in the loading of an external code class and the execution of that code (RCE). via picussecurity

Usage

python log4shell.py --help

Owner

GitHub Repository

Anti-Nuke capabilities, powerful moderation features, auto punishments, captcha-verification and more.

Server-Security-Discord-Bot Anti-Nuke capabilities, powerful moderation features, auto punishments, captcha-verification and more. Installation Instal

20 Apr 07, 2022

Get important strings inside [Info.plist] & and Binary file also all output of result it will be saved in [app_binary].json , [app_plist_file].json file

12 Sep 28, 2022

A python script to bypass 403-forbidden.

4nought3 A python script to bypass 403-forbidden. It covers methods like Host-Header Injections, Changing HTTP Requests Methods and URL-Injections. Us

11 Aug 27, 2022

Xteam All in one Instagram,Android,phishing osint and wifi hacking tool available

283 Dec 29, 2022

Show apps recorded storage files by jailbreak

0x101 Show registered storage files of apps by jailbreak Legal disclaimer: Usage of insTof for attacking targets without prior mutual consent is illeg

4 Oct 24, 2022

Tool To generate Stable Undetected Payload

windowsPayload Tool To generate Stable Undetected Payload Don t Upload to Virus Total :) Follow on Social Media Platforms ScreenShots How to install +

117 Dec 30, 2022

A fast tool to scan prototype pollution vulnerability

proto A fast tool to scan prototype pollution vulnerability Syntax python3 proto.py -l alive.txt Requirements Selenium Google Chrome Webdriver Note :

4 Aug 31, 2021

Http-proxy-list - A lightweight project that hourly scrapes lots of free-proxy sites, validates if it works, and serves a clean proxy list

Free HTTP Proxy List 🌍 It is a lightweight project that hourly scrapes lots of

142 Jan 05, 2023

Cisco RV110w UPnP stack overflow

Cisco RV110W UPnP 0day 分析前言最近UPnP比较火，恰好手里有一台Cisco RV110W，在2021年8月份思科官方公布了一个Cisco RV系列关于UPnP的0day，但是具体的细节并没有公布出来。于是想要用手中的设备调试挖掘一下这个漏洞，漏洞的公告可以在官网看到。准

25 Nov 09, 2022

Malware for Discord, designed to steal passwords, tokens, and inject discord folders for long-term use.

Vital What is Vital? Vital is malware primarily used to collect and extract information from the Discord desktop client. While it has other features (

59 Dec 01, 2022

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service. This tool can help a digital forensic investigator to know the conte

96 Dec 20, 2022

Log4j command generator: Generate commands for CVE-2021-44228

Related tags

Overview

Log4j command generator

Description

Usage

Owner

Anti-Nuke capabilities, powerful moderation features, auto punishments, captcha-verification and more.

Get important strings inside [Info.plist] & and Binary file also all output of result it will be saved in [app_binary].json , [app_plist_file].json file

A python script to bypass 403-forbidden.

Xteam All in one Instagram,Android,phishing osint and wifi hacking tool available

Show apps recorded storage files by jailbreak

Tool To generate Stable Undetected Payload

A fast tool to scan prototype pollution vulnerability

Http-proxy-list - A lightweight project that hourly scrapes lots of free-proxy sites, validates if it works, and serves a clean proxy list

Cisco RV110w UPnP stack overflow

Malware for Discord, designed to steal passwords, tokens, and inject discord folders for long-term use.

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service

Script Crack Facebook Premium 🚶‍♂

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907

KeyKatcher is a keylogger that records keystrokes made on a computer and sends to the E-Mail.

This is a repository filled with scripts that were made with Python, and designed to exploit computer systems.

Tools for investigating Log4j CVE-2021-44228

Wonk is a tool for combining a set of AWS policy files into smaller compiled policy sets.

Crowbar - A windows post exploitation tool

OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the