Log4J - Have your customer been breached? What have you seen if anything?

• log4shell-detector

  3 732 0.0 Python

  Detector for Log4Shell exploitation attempts

If you're talking about Florian's exploit detection note that nearly every hit in practice is going to be a DNS probe, like the Huntress one.

• log4j2-rce-poc

  1 3 4.1 Kotlin

  A bare minimum proof-of-concept for Log4j2 JNDI RCE vulnerability (CVE-2021-44228/Log4Shell).

However, when using JNDI lookups, if you return properly formatted JNDI data (from a malicious server) then Java will execute that code. You can see this in PoC code: https://github.com/unlimitedsola/log4j2-rce-poc/blob/master/payload-server/src/main/kotlin/Main.kt

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• CVE-2021-44228_scanner

  13 346 1.8 PowerShell

  Scanners for Jar files that may be vulnerable to CVE-2021-44228

  

• log4shell

  41 1,876 9.9 Python

  Discontinued Operational information regarding the log4shell vulnerabilities in the Log4j logging library.

  

NCSC-NL has a researched list of specific vulnerabilities.

Suggest a related project