---
id: 4036
title: "[CVE-2021-44228] How Bishop Fox Has Been Identifying and Exploiting Log4shell"
cve: CVE-2021-44228
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/identify-and-exploit-log4shell"
published_at: "2021-12-27T00:00:00Z"
tags: ["pentesting", "exploitation", "vulnerability", "log4j", "log4shell", "cve-2021-44228"]
phying_url: "https://phying.com/item/4036"
lang: en
---

# [CVE-2021-44228] How Bishop Fox Has Been Identifying and Exploiting Log4shell

## Summary

Bishop Fox's account of the first chaotic week of Log4shell (CVE-2021-44228): JNDI/LDAP payloads sprayed via HTTP headers and DNS exfiltration when outbound TCP was blocked.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2021-44228
- **Published:** 2021-12-27T00:00:00Z
- **Original:** https://bishopfox.com/blog/identify-and-exploit-log4shell
- **Phying News:** https://phying.com/item/4036