Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.

Last update: Jan 02, 2023

Overview

Log4Shell RCE Exploit

fully independent exploit does not require any 3rd party binaries. The exploit spraying the payload to all possible logged HTTP Headers such as X-Forwarding , Server-IP , User-Agent

Usage

python main.py -i lhost -u http://target:targetport -c "command_to_execute" -p lhttp_port -l lldap_port

Requirements

java-8-openjdk
pip install -r requirements.txt
python3.6+

Owner

GitHub Repository

Security offerings for AWS Control Tower

Caylent Security Catalyst Reference Architecture Examples This repository contains solutions for Caylent's Security Catalyst. The Security Catalyst is

1 Oct 22, 2021

A DOM-based G-Suite password sprayer and user enumerator

1 Apr 07, 2022

Password-Manager - This app can generate ,save , find and delete passwords.

Password-Manager This app can generate ,save , find and delete passwords. In the StartUp() Function , there are three buttons to choose from : Generat

1 Jan 01, 2022

Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack

O365DevicePhish Microsoft365_devicePhish Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack This is a simple proof-of-concept script t

4 Sep 23, 2022

A simple Outline Server Access Key Copy and Paste Web Interface

Outline Keychain A simple Outline Server Access Key Copy and Paste Web Interface Developed for key and password export and copy & paste for other Shad

1 Dec 28, 2021

Repo for The Crown: Exploratory Analysis of Nim Malware DEF CON 615 talk

Repo for "The Crown: Exploratory Analysis of Nim Malware" DEF CON 615 talk

43 Dec 03, 2022

A scanner and a proof of sample exploit for log4j RCE CVE-2021-44228

1.Create a Sample Vulnerable Application . 2.Start a netcat listner . 3.Run the exploit . 5.Use jdk1.8.0_20 for better results . Exploit-db - https://

7 Aug 06, 2022

Discord exploit allowing you to be unbannable.

Discord-Ban-Immunity Discord exploit allowing you to be unbannable. 9/3/2021 Found in late August. Found by Passive and Me. Explanation If a user gets

9 Nov 23, 2022

Malware for Discord, designed to steal passwords, tokens, and inject discord folders for long-term use.

Vital What is Vital? Vital is malware primarily used to collect and extract information from the Discord desktop client. While it has other features (

59 Dec 01, 2022

Cloud One Container Security Runtime Events Forwarder

Example on how to query events by a RESTful API, compose CEF event format and send the events to an UDP receiver.

3 Feb 10, 2022

Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks.

Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage

84 Dec 23, 2022

Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.

Related tags

Overview

Log4Shell RCE Exploit

Usage

Requirements

Owner

Security offerings for AWS Control Tower

A DOM-based G-Suite password sprayer and user enumerator

Password-Manager - This app can generate ,save , find and delete passwords.

Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack

A simple Outline Server Access Key Copy and Paste Web Interface

Repo for The Crown: Exploratory Analysis of Nim Malware DEF CON 615 talk

A scanner and a proof of sample exploit for log4j RCE CVE-2021-44228

Discord exploit allowing you to be unbannable.

Malware for Discord, designed to steal passwords, tokens, and inject discord folders for long-term use.

Cloud One Container Security Runtime Events Forwarder

Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks.

Detection And Breaking With Python

xkeysnail is yet another keyboard remapping tool for X environment written in Python

Tool for finding PHP source code vulnerabilities.

Privacy-respecting metasearch engine

Blinder is a tool that will help you simplify the exploitation of blind SQL injection

A forensic collection tool written in Python.

A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell

Make files with as many random bytes as you want

PySharpSphere - Inspired by SharpSphere, just another python version