HackLog4j
本项目用来致敬全宇宙最无敌的Java日志库！同时也记录自己在学习Log4j漏洞过程中遇到的一些内容。本项目会持续更新，本项目创建于2021年12月10日，最近的一次更新时间为2021年12月13日。作者：0e0w
- 01-Log4j基础知识
- 02-Log4j框架识别
- 03-Log4j上层建筑
- 04-Log4j漏洞汇总
- 05-Log4j漏洞检测
- 06-Log4j漏洞利用
- 07-Log4j分析文章
- 08-Log4j靶场环境
01-Log4j基础知识
02-Log4j框架识别
- 待更新
03-Log4j上层建筑
log4j + ？ = rce ！
- Apache Flink
- Apache Struts2
- flume
- dubbo
- Druid
- Redis
- logstash
- ElasticSearch
- kafka
- ghidra
- Spring-Boot-strater-log4j2
- 我的世界（Minecraft）
- ......
- https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core/usages
- https://github.com/YfryTchsGD/Log4jAttackSurface
- https://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes
- https://github.com/CrackerCat/Log4jAttackSurface
04-Log4j漏洞汇总
- CVE-2021-44228
- CVE-2019-17571
- CVE-2017-5645
05-Log4j漏洞检测
06-Log4j漏洞利用
- https://github.com/bit4woo/log4jScan
- https://github.com/Yihsiwei/Log4j-exp
- https://github.com/FrankHeijden/Log4jFix
- https://github.com/simonis/Log4jPatch
- https://github.com/Szczurowsky/Log4j-0Day-Fix
- https://github.com/Anonymous-ghost/log4jVul
- https://github.com/SumoLogic/sumologic-log4j2-appender
- https://github.com/chaitin/log4j2-vaccine
- https://github.com/ilsubyeega/log4j2-exploits
- https://github.com/rz7d/log4j-force-upgrader
- https://github.com/xsser/log4jdemoforRCE
- https://github.com/zhangyoufu/log4j2-without-jndi
- https://github.com/Cyronlee/log4j-rce
- https://github.com/CreeperHost/Log4jPatcher
- https://github.com/notrhys/Log-4J-Exploit-Fix
- https://github.com/Re1own/Apache-log4j-POC
- https://github.com/boundaryx/cloudrasp-log4j2
- https://github.com/jas502n/Log4j2-CVE-2021-44228
- https://github.com/ChloePrime/fix4log4j
- https://github.com/toString122/log4j2_exp
- https://github.com/shanfenglan/apache_log4j_poc
- https://github.com/dbgee/CVE-2021-44228
- https://github.com/lcosmos/apache-log4j-poc
- https://github.com/DichuuCraft/LOG4J2-3201-fix
- https://github.com/dbgee/CVE-2021-44228
- https://github.com/lcosmos/apache-log4j-poc
- https://github.com/DichuuCraft/LOG4J2-3201-fix
- https://github.com/dbgee/log4j2_rce
- https://github.com/ReadER-L/log4j-rce
- https://github.com/HyCraftHD/Log4J-RCE-Proof-Of-Concept
- https://github.com/Seayon/Log4j2RCE_Demo
- https://github.com/elbosso/Log4J2CustomJMXAppender
- https://github.com/ahus1/logging-and-tracing
- https://github.com/stuartwdouglas/log4j-jndi-agent
- https://github.com/xiajun325/apache-log4j-rce-poc
- https://github.com/caoli5288/log4j2jndiinterceptor
- https://github.com/y35uishere/Log4j2-CVE-2021-44228
- https://github.com/ErdbeerbaerLP/log4jfix
- https://github.com/0x0021h/apache-log4j-rce
- https://github.com/Gav06/RceFix
- https://github.com/UltraVanilla/LogJackFix
- https://github.com/iamsino/log4j2-Exp
- https://github.com/bkfish/Apache-Log4j-Learning
- https://github.com/LoliKingdom/NukeJndiLookupFromLog4j
- https://github.com/tangxiaofeng7/apache-log4j-poc
- https://github.com/h1b1ki/apache-log4j-poc
- https://github.com/EmptyIrony/Log4j2Fixer
- https://github.com/AzisabaNetwork/Log4j2Fix
- https://github.com/apple502j/Log4Jail
- https://github.com/jacobtread/L4J-Vuln-Patch
- https://github.com/stardust1900/log4j-2.15.0
- https://github.com/nest-x/nestx-log4js
- https://github.com/Marcelektro/Log4J-RCE-Implementation
- https://github.com/jdremillard/json-logging
- https://github.com/parayaluyanta/sell-logs-and-peace
- https://github.com/albar965/atools
- https://github.com/Al0sc/Log4j-rce
- https://github.com/ven0n1/Log4jv2Maven
- https://github.com/akunzai/log4j2-sendgrid-appender
- https://github.com/inbug-team/Log4j_RCE_Tool
- https://github.com/zlepper/CVE-2021-44228-Test-Server
- https://github.com/webraybtl/Log4j
- https://github.com/f0ng/log4jscanner
- https://github.com/numanturle/Log4jNuclei
- https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce
- https://github.com/kozmer/log4j-shell-poc
- https://github.com/hackerhackrat/Log4j2-RCE-burp-plugin
- https://github.com/mzlogin/CVE-2021-44228-Demo
- https://github.com/greymd/CVE-2021-44228
- https://github.com/Cybereason/Logout4Shell
- https://github.com/webraybtl/log4j-snort
- https://github.com/corretto/hotpatch-for-apache-log4j2
- https://github.com/alexandre-lavoie/python-log4rce
- https://github.com/hillu/local-log4j-vuln-scanner
- https://github.com/f0ng/log4j2burpscanner
- https://github.com/leonjza/log4jpwn
九、Payload
- https://github.com/test502git/log4j-fuzz-head-poc
- https://github.com/fullhunt/log4j-scan
- https://github.com/woodpecker-appstore/log4j-payload-generator
- https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
九、BrupSuite
- https://github.com/silentsignal/burp-log4shell
- https://github.com/pmiaowu/log4jScan
- https://github.com/guguyu1/log4j2_burp_scan
- https://github.com/whwlsfb/Log4j2Scan
- https://github.com/bigsizeme/Log4j-check
九、漏洞检测
07-Log4j分析文章
- https://mp.weixin.qq.com/s/4cvooT4tfQhjL7t4GFzYFQ
- https://mp.weixin.qq.com/s/l7iclJRegADs3oiEdcgAvQ
- https://mp.weixin.qq.com/s/nOmQFq4KxM9AZ_HYIq1_CQ
- https://mp.weixin.qq.com/s/K74c1pTG6m5rKFuKaIYmPg
- https://mp.weixin.qq.com/s/AWhV-QdkQ6i2IEZSVhe-Kg
- https://mp.weixin.qq.com/s/iHqwL6jslyCV_0jtdVj82A
- https://lorexxar.cn/2021/12/10/log4j2-jndi
- https://www.t00ls.cc/thread-63705-1-1.html
- https://mp.weixin.qq.com/s/vAE89A5wKrc-YnvTr0qaNg
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent