#CVE-2021

Fun things against the abuse of the recent CVE-2021-44228 (Log4Shell) vulnerability using common web servers.

https://github.com/KainsRache/anti-jndi

@BlueRedTeam

#CVE-2021
#Log4j

fail2ban filter that catches attacks againts log4j CVE-2021-44228

https://github.com/atnetws/fail2ban-log4j

@BlueRedTeam

#CVE-2021
#Log4j
This is a proof-of-concept exploit for Log4j RCE Unauthenticated (CVE-2021-44228).

https://github.com/pedrohavay/exploit-CVE-2021-44228

@BlueRedTeam

#CVE-2021

Ingest GreyNoise.io malicious feed for CVE-2021-44228 and apply null routes

https://github.com/0xRyan/log4j-nullroute

@BlueRedTeam

#Red_Team
"LaserShark: Establishing Fast, Bidirectional Communication into Air-Gapped Systems", 2021.

// A novel approach to infiltrate data to air-gapped systems without any additional hardware on-site. By aiming lasers at already built-in LEDs and recording their response, we are the first to enable a long-distance (25 m), covert communication channel. The approach can be used against any office device that operates LEDs at the CPU’s GPIO interface...

@BlueRedTeam

#CVE-2021

a fast check, if your server could be vulnerable to CVE-2021-44228

https://github.com/rubo77/log4j_checker_beta

@BlueRedTeam

#CVE-2021
#Log4Shell
#Log4j
Java agent that disables Apache Log4J's JNDI Lookup. Fixes CVE-2021-44228, aka \"Log4Shell.\"

https://github.com/alerithe/log4noshell

@BlueRedTeam

#CVE-2021
#Log4j

Scanner for Log4j RCE CVE-2021-44228

https://github.com/thecyberneh/Log4j-RCE-Exploiter

@BlueRedTeam

#CVE-2021
#Log4j
Log4J CVE-2021-44228 : Mitigation for different environments

https://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228

@BlueRedTeam

#CVE-2021
#Log4j
CVE-2021-44228 log4j mitigation using aws wafv2 with ansible

https://github.com/markuman/aws-log4j-mitigations

@BlueRedTeam

#Log4j
#CVE-2021

Log4J CVE-2021-44228 : Mitigation Cheat Sheet

https://github.com!/thedevappsecguy/Log4J-CVE-2021-44228-Mitigation-Cheat-Sheet

@BlueRedTeam

#CVE-2021
#log4j
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

https://github.com/fullhunt/log4j-scan

@BlueRedTeam

#Blue_Team
1. Exploit samAccountName spoofing with Kerberos
https://cloudbrothers.info/en/exploit-kerberos-samaccountname-spoofing
2. Log4Shell: Reconnaissance and post exploitation network detection - includes numerous Suricata_IDS
rules and IoCs
https://research.nccgroup.com/2021/12/12/log4shell-reconnaissance-and-post-exploitation-network-detection

@BlueRedTeam

#CVE-2021
#Log4j
A lab for playing around with the Log4J CVE-2021-44228

https://github.com/tuyenee/Log4shell

@BlueRedTeam

#CVE-2021

Simple tool for scanning entire directories for attempts of CVE-2021-44228

https://github.com/kek-Sec/log4j-scanner-CVE-2021-44228

@BlueRedTeam

#CVE-2021

CVE-2021-36260

https://github.com/tuntin9x/CheckHKRCE

@BlueRedTeam

#CVE-2021

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

https://github.com/Ridter/noPac

@BlueRedTeam

#CVE-2021

Research into the implications of CVE-2021-44228 in Spring based applications.

https://github.com/Camphul/log4shell-spring-framework-research

@BlueRedTeam

#CVE-2021
#Log4j
simple python scanner to check if your network is vulnerable to CVE-2021-44228

https://github.com/sinakeshmiri/log4jScan

@BlueRedTeam

#CVE-2021
#Log4j
#Log4Shell
Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.

https://github.com/0xDexter0us/Log4J-Scanner

@BlueRedTeam

#CVE-2021

A PoC for CVE-2021-44827 - authenticated remote code execution in Tp-link Archer C20i

https://github.com/full-disclosure/CVE-2021-44827

@BlueRedTeam