PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2021-44228] How Bishop Fox Has Been Identifying and Exploiting Log4shell

bishopfox.com | vulnerability | CVE-2021-44228 | #pentesting | #exploitation | #vulnerability | #log4j | #log4shell | #cve-2021-44228
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox's account of the first chaotic week of Log4shell (CVE-2021-44228): JNDI/LDAP payloads sprayed via HTTP headers and DNS exfiltration when outbound TCP was blocked.
CVE
CVE-2021-44228
Published
Collected

Related coverage

vulnerability · bugcrowd.com
Log4Shell, The Worst Java Vulnerability in Years
Log4Shell (CVE-2021-44228) is a 10.0-critical RCE affecting Apache Log4j 2.0-beta9 to 2.14.1, hitting Apple, Cloudflare, Twitter, and Minecraft—considered worse than the 2017 Apache Struts flaw.
vulnerability · blog.viettelcybersecurity.com
The Log4Shell vulnerability may have been exploited since August 2021
Analyzing DNS logger logs, Viettel researchers conclude Log4Shell exploitation may have begun around September 4, 2021 - months before disclosure - hitting at least 10 organizations worldwide.
vulnerability · netspi.com
[CVE-2021-44228] Log4j: Is My Organization Impacted?
Find out if your organization is vulnerable to the Log4j vulnerabilities, read about the impact of CVE-2021-44228 and its variants, and learn mitigation steps to take.
research · blog.viettelcybersecurity.com
CVE-2021-44228 | Lỗ hổng NGHIÊM TRỌNG trên thư viện Apache Log4j và các vấn đề liên quan
An overview of Log4Shell (CVE-2021-44228): unauthenticated JNDI injection RCE in Log4j 2.0-beta9 through 2.14.1, rated CVSS 10, noting JNDI injection research dates back to Black Hat 2016.
vulnerability · bishopfox.com
Log4j Vulnerability: Impact Analysis
Bishop Fox experts analyze CVE-2021-44228's impact: CVSS 10 unauthenticated RCE in Apache Log4j, first mass scanning on December 10, 2021, and affected projects from Elasticsearch to Struts.
vulnerability · horizon3.ai
[CVE-2021-44228] The Long Tail of Log4Shell Exploitation
# The Long Tail of Log4Shell Exploitation Naveen Sunkavally July 13, 2022 Attack Blogs It’s been more than six months since the Log4Shell vulnerability (CVE-2021-44228) was disclosed, and a number...
Back