Skip to content
[CVE-2021-44228] How Bishop Fox Has Been Identifying and Exploiting Log4shell
bishopfox.com | vulnerability | CVE-2021-44228 | #pentesting | #exploitation | #vulnerability | #log4j | #log4shell | #cve-2021-44228
Summary
Bishop Fox's account of the first chaotic week of Log4shell (CVE-2021-44228): JNDI/LDAP payloads sprayed via HTTP headers and DNS exfiltration when outbound TCP was blocked.
- Published
- Collected