#CVE-2021
#Log4J
Log4J (CVE-2021-44228) Exploit with Remote Command Execution (RCE)

https://github.com/corneacristian/Log4J-CVE-2021-44228-RCE

@BlueRedTeam

Listen to Music 😉 : @Gray1986

#CVE-2021
#Log4j

Log4j RCE - (CVE-2021-44228)

https://github.com/momos1337/Log4j-RCE

@BlueRedTeam

#CVE-2021
#Nmap
#log4Shell
Nmap NSE noscripts to check against log4shell or LogJam vulnerabilities (CVE-2021-44228)

https://github.com/Diverto/nse-log4shell

@BlueRedTeam

#CVE-2021
#log4Shell
pure pythonic python RCE for CVE-2021-44228 log4shell

https://github.com/dotPY-hax/log4py

@BlueRedTeam

#CVE-2021
#log4j2
Test locally an exploit for Log4J2's CVE-2021-44228 (Log4Shell)

https://github.com/sunnyvale-it/CVE-2021-44228-PoC

@BlueRedTeam

#CVE-2021
#Red_Team
#Blue_Team
Some files for red team/blue team investigations into CVE-2021-44228

https://github.com/kimobu/cve-2021-44228

@BlueRedTeam

#CVE-2021

Fun things against the abuse of the recent CVE-2021-44228 (Log4Shell) vulnerability using common web servers.

https://github.com/KainsRache/anti-jndi

@BlueRedTeam

#CVE-2021
#Log4j

fail2ban filter that catches attacks againts log4j CVE-2021-44228

https://github.com/atnetws/fail2ban-log4j

@BlueRedTeam

#CVE-2021
#Log4j
This is a proof-of-concept exploit for Log4j RCE Unauthenticated (CVE-2021-44228).

https://github.com/pedrohavay/exploit-CVE-2021-44228

@BlueRedTeam

#CVE-2021

Ingest GreyNoise.io malicious feed for CVE-2021-44228 and apply null routes

https://github.com/0xRyan/log4j-nullroute

@BlueRedTeam

#Red_Team
"LaserShark: Establishing Fast, Bidirectional Communication into Air-Gapped Systems", 2021.

// A novel approach to infiltrate data to air-gapped systems without any additional hardware on-site. By aiming lasers at already built-in LEDs and recording their response, we are the first to enable a long-distance (25 m), covert communication channel. The approach can be used against any office device that operates LEDs at the CPU’s GPIO interface...

@BlueRedTeam

#CVE-2021

a fast check, if your server could be vulnerable to CVE-2021-44228

https://github.com/rubo77/log4j_checker_beta

@BlueRedTeam

#CVE-2021
#Log4Shell
#Log4j
Java agent that disables Apache Log4J's JNDI Lookup. Fixes CVE-2021-44228, aka \"Log4Shell.\"

https://github.com/alerithe/log4noshell

@BlueRedTeam

#CVE-2021
#Log4j

Scanner for Log4j RCE CVE-2021-44228

https://github.com/thecyberneh/Log4j-RCE-Exploiter

@BlueRedTeam

#CVE-2021
#Log4j
Log4J CVE-2021-44228 : Mitigation for different environments

https://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228

@BlueRedTeam

#CVE-2021
#Log4j
CVE-2021-44228 log4j mitigation using aws wafv2 with ansible

https://github.com/markuman/aws-log4j-mitigations

@BlueRedTeam

#Log4j
#CVE-2021

Log4J CVE-2021-44228 : Mitigation Cheat Sheet

https://github.com!/thedevappsecguy/Log4J-CVE-2021-44228-Mitigation-Cheat-Sheet

@BlueRedTeam

#CVE-2021
#log4j
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

https://github.com/fullhunt/log4j-scan

@BlueRedTeam

#Blue_Team
1. Exploit samAccountName spoofing with Kerberos
https://cloudbrothers.info/en/exploit-kerberos-samaccountname-spoofing
2. Log4Shell: Reconnaissance and post exploitation network detection - includes numerous Suricata_IDS
rules and IoCs
https://research.nccgroup.com/2021/12/12/log4shell-reconnaissance-and-post-exploitation-network-detection

@BlueRedTeam

#CVE-2021
#Log4j
A lab for playing around with the Log4J CVE-2021-44228

https://github.com/tuyenee/Log4shell

@BlueRedTeam