CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
CVSS 3.1Medium
10.0/ 10.0
Опубликовано
Обновлено
В атаках
Не зафиксировано
Публичный PoC
Отсутствует
Анализ подготовлен:CVE Futuretools Threat Intelligence
Верификация: MITRE CVE List · CISA KEV · NIST NVD
ОФИЦИАЛЬНЫЙ ПАТЧ НЕ ОПУБЛИКОВАН
Обновите Log4j до версии 2.16.0 или специализированных релизов 2.12.2, 2.12.3, 2.3.1. В версии 2.15.0 функциональность отключена по умолчанию.
01 // ТЕХНИЧЕСКАЯ СУТЬ УЯЗВИМОСТИ
Функции JNDI в Apache Log4j2 допускают удалённое выполнение произвольного кода при обработке записей журнала.
02 // АНАТОМИЯ АТАКИ И ДЕФЕКТ ЛОГИКИ
Механизм подстановки сообщений lookup не защищает от контролируемых атакующим эндпоинтов LDAP и JNDI в конфигурации, сообщениях журнала и параметрах. Атакующий, контролирующий логируемые данные, может инициировать выполнение кода, загруженного с внешнего LDAP-сервера.
03 // СИСТЕМНЫЕ ПОСЛЕДСТВИЯ
Удалённое выполнение произвольного кода (RCE).
04 // МАТРИЦА ЗАТРОНУТЫХ ПАКЕТОВ
Точные диапазоны версий не зафиксированы в источниках
05 // ПЕРВОИСТОЧНИКИ И БЮЛЛЕТЕНИ (537)
- logging.apache.orghttps://logging.apache.org/log4j/2.x/security.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2021/12/10/1
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2021/12/10/2
- tools.cisco.comhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2021/12/10/3
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20211210-0007/
- packetstormsecurity.comhttp://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html
- psirt.global.sonicwall.comhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032
- www.oracle.comhttps://www.oracle.com/security-alerts/alert-cve-2021-44228.html
- www.debian.orghttps://www.debian.org/security/2021/dsa-5020
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2021/12/msg00007.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/
- msrc-blog.microsoft.comhttps://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2021/12/13/2
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2021/12/13/1
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2021/12/14/4
- www.kb.cert.orghttps://www.kb.cert.org/vuls/id/930724
- twitter.comhttps://twitter.com/kurtseifried/status/1469345530182455296
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf
- packetstormsecurity.comhttp://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html
- www.intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html
- www.exploit-db.comhttps://www.exploit-db.com/exploits/50592
- www.exploit-db.comhttps://www.exploit-db.com/exploits/50590
- www.exploit-db.comhttps://www.exploit-db.com/exploits/51183
- github.comhttps://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/log4shell_scanner.rb
- github.comhttps://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/mobileiron_core_log4shell.rb
- github.comhttps://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/log4shell_header_injection.rb
- github.comhttps://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ubiquiti_unifi_log4shell.rb
- github.comhttps://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vmware_vcenter_log4shell.rb
- github.comhttps://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44228.yaml
- github.comhttps://github.com/0xBlackash/CVE-2021-44228
- github.comhttps://github.com/0xDexter0us/Log4J-Scanner
- github.comhttps://github.com/0xInfection/LogMePwn
- github.comhttps://github.com/0xThiebaut/CVE-2021-44228
- github.comhttps://github.com/0xalwayslucky/log4j-polkit-poc
- github.comhttps://github.com/0xsyr0/Log4Shell
- github.comhttps://github.com/14free/log4j2-vuln-lab
- github.comhttps://github.com/1hakusai1/log4j-rce-CVE-2021-44228
- github.comhttps://github.com/1in9e/Apache-Log4j2-RCE
- github.comhttps://github.com/1lann/log4shelldetect
- github.comhttps://github.com/34zY/JNDI-Exploit-1.2-log4shell
- github.comhttps://github.com/3pplus/loguccino
- github.comhttps://github.com/4jfinder/4jfinder.github.io
- github.comhttps://github.com/53buahapel/log4shell-vulnweb
- github.comhttps://github.com/Adikso/minecraft-log4j-honeypot
- github.comhttps://github.com/AhmedMansour93/-Unveiling-the-Lessons-from-Log4Shell-A-Wake-Up-Call-for-Cybersecurity-
- github.comhttps://github.com/AhndreWalters/ProjectSecurity-Homelab
- github.comhttps://github.com/AlexandreHeroux/Fix-CVE-2021-44228
- github.comhttps://github.com/Ananya-0306/Log-4j-scanner
- github.comhttps://github.com/Apipia/log4j-pcap-activity
- github.comhttps://github.com/Aschen/log4j-patched
- github.comhttps://github.com/AstralJays/TraditionalJay
- github.comhttps://github.com/Azeemering/CVE-2021-44228-DFIR-Notes
- github.comhttps://github.com/BJLIYANLIANG/log4j-scanner
- github.comhttps://github.com/BabooPan/Log4Shell-CVE-2021-44228-Demo
- github.comhttps://github.com/BinaryDefense/log4j-honeypot-flask
- github.comhttps://github.com/C00LN3T/Log4ShellAuditor
- github.comhttps://github.com/CERTCC/CVE-2021-44228_scanner
- github.comhttps://github.com/Camphul/log4shell-spring-framework-research
- github.comhttps://github.com/Carlos-Mesquita/TPASLog4ShellPoC
- github.comhttps://github.com/ChandanShastri/Log4j_Vulnerability_Demo
- github.comhttps://github.com/CodeShield-Security/Log4JShell-Bytecode-Detector
- github.comhttps://github.com/Codepumpking/log4shell-poc
- github.comhttps://github.com/ColdFusionX/CVE-2021-44228-Log4Shell-POC
- github.comhttps://github.com/Contrast-Security-OSS/CVE-2021-44228
- github.comhttps://github.com/CrackerCat/CVE-2021-44228-Log4j-Payloads
- github.comhttps://github.com/Crane-Mocker/log4j-poc
- github.comhttps://github.com/CreeperHost/Log4jPatcher
- github.comhttps://github.com/CyberCTF/vulhub-log4j-cve-2021-44228
- github.comhttps://github.com/DAADAISMYLIFE/log4shell-lab
- github.comhttps://github.com/DANSI/PowerShell-Log4J-Scanner
- github.comhttps://github.com/DXC-StrikeForce/Burp-Log4j-HammerTime
- github.comhttps://github.com/Developer-Dynamo/cs50-cybersecurity-final-project
- github.comhttps://github.com/DiCanio/CVE-2021-44228-docker-example
- github.comhttps://github.com/Diverto/nse-log4shell
- github.comhttps://github.com/DrHaitham/Log4Shell-CVE-2021-44228
- github.comhttps://github.com/DragonSurvivalEU/RCE
- github.comhttps://github.com/FacundoMfernandez/pentesting-obioba
- github.comhttps://github.com/Fauzan-Aldi/Log4j-_Vulnerability
- github.comhttps://github.com/Fazmin/vCenter-Server-Workaround-Script-CVE-2021-44228
- github.comhttps://github.com/FeryaelJustice/Log4Shell
- github.comhttps://github.com/Glease/Healer
- github.comhttps://github.com/Grupo-Kapa-7/CVE-2021-44228-Log4j-PoC-RCE
- github.comhttps://github.com/Hoanle396/CVE-2021-44228-demo
- github.comhttps://github.com/HyCraftHD/Log4J-RCE-Proof-Of-Concept
- github.comhttps://github.com/Hydragyrum/evil-rmi-server
- github.comhttps://github.com/HynekPetrak/log4shell-finder
- github.comhttps://github.com/IAmNewbieZ/CVE-2021-44228
- github.comhttps://github.com/Jeromeyoung/log4j2burpscanner
- github.comhttps://github.com/Jiahong-Guan/log4j-shell-poc
- github.comhttps://github.com/JiuBanSec/Log4j-CVE-2021-44228
- github.comhttps://github.com/Joefreedy/Log4j-Windows-Scanner
- github.comhttps://github.com/JoseMariaMicoli/Log4Shell-PoC
- github.comhttps://github.com/Jun-5heng/CVE-2021-44228
- github.comhttps://github.com/Kadantte/CVE-2021-44228-poc
- github.comhttps://github.com/KalidouLabghaly/log4shell-exploitation-detection
- github.comhttps://github.com/KamalideenAK/Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device
- github.comhttps://github.com/KeysAU/Get-log4j-Windows-local
- github.comhttps://github.com/KeysAU/Get-log4j-Windows.ps1
- github.comhttps://github.com/KirkDJohnson/Wireshark
- github.comhttps://github.com/KosmX/CVE-2021-44228-example
- github.comhttps://github.com/Koupah/MC-Log4j-Patcher
- github.comhttps://github.com/Kr0ff/CVE-2021-44228
- github.comhttps://github.com/KtokKawu/l4s-vulnapp
- github.comhttps://github.com/Labout/log4shell-rmi-poc
- github.comhttps://github.com/Lavanya2085/solar-exploiting-log4j
- github.comhttps://github.com/LemonCraftRu/JndiRemover
- github.comhttps://github.com/LinkMJB/log4shell_scanner
- github.comhttps://github.com/LiveOverflow/log4shell
- github.comhttps://github.com/Loliverte/Log4j-Vulnerability
- github.comhttps://github.com/LucasPDiniz/CVE-2021-44228
- github.comhttps://github.com/LutziGoz/Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228
- github.comhttps://github.com/M1ngGod/CVE-2021-44228-Log4j-lookup-Rce
- github.comhttps://github.com/MAFO-sec/mi-laboratorio-log4shell
- github.comhttps://github.com/Malwar3Ninja/Exploitation-of-Log4j2-CVE-2021-44228
- github.comhttps://github.com/MalwareTech/Log4jTools
- github.comhttps://github.com/MarceloLeite2604/log4j-vulnerability
- github.comhttps://github.com/MeterianHQ/log4j-vuln-coverage-check
- github.comhttps://github.com/MiguelM001/vulescanjndilookup
- github.comhttps://github.com/Mintimate/log4j2-bugmaker
- github.comhttps://github.com/MrHarshvardhan/PY-Log4j-RCE-Scanner
- github.comhttps://github.com/Muhammad-Ali007/Log4j_CVE-2021-44228
- github.comhttps://github.com/Muskann02/cve-2021-44228-lab
- github.comhttps://github.com/NS-Sp4ce/Vm4J
- github.comhttps://github.com/Nanitor/log4fix
- github.comhttps://github.com/NikitaPark/Log4Shell-PoC-Application
- github.comhttps://github.com/NorthwaveSecurity/log4jcheck
- github.comhttps://github.com/Occamsec/log4j-checker
- github.comhttps://github.com/OlafHaalstra/log4jcheck
- github.comhttps://github.com/OopsieWoopsie/mc-log4j-patcher
- github.comhttps://github.com/OtisSymbos/CVE-2021-44228-Log4Shell-
- github.comhttps://github.com/PCMKUIT/CVE-2021-44228---Log4Shell-Analysis
- github.comhttps://github.com/Panyaprach/Prove-CVE-2021-44228
- github.comhttps://github.com/Phineas09/CVE-2021-44228
- github.comhttps://github.com/PoneyClairDeLune/LogJackFix
- github.comhttps://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
- github.comhttps://github.com/Ravid-CheckMarx/CVE-2021-44228-Apache-Log4j-Rce-main
- github.comhttps://github.com/RedDrip7/Log4Shell_CVE-2021-44228_related_attacks_IOCs
- github.comhttps://github.com/RenYuH/log4j-lookups-vulnerability
- github.comhttps://github.com/ResoluteRacoons/log4-Java-logging-poc
- github.comhttps://github.com/Ricardo354/homelab-CVE-2021-44228
- github.comhttps://github.com/Rk-000/Log4j_scan_Advance
- github.comhttps://github.com/RrUZi/Awesome-CVE-2021-44228
- github.comhttps://github.com/Saru1718/THM---Solar-exploiting-Log-4j
- github.comhttps://github.com/SerpilRivas/log4shell-homework9
- github.comhttps://github.com/Sh0ckFR/log4j-CVE-2021-44228-Public-IoCs
- github.comhttps://github.com/ShaneKingBlog/org.shaneking.demo.cve.y2021.s44228
- github.comhttps://github.com/ShivendraNT/ehax-log4shell-openhouse
- github.comhttps://github.com/ShlomiRex/log4shell_lab
- github.comhttps://github.com/ShyVictor/minecraft-rce-lab
- github.comhttps://github.com/Sma-Das/Log4j-PoC
- github.comhttps://github.com/Sorrence/CVE-2021-44228
- github.comhttps://github.com/Sumitpathania03/LOG4J-CVE-2021-44228
- github.comhttps://github.com/Super-Binary/cve-2021-44228
- github.comhttps://github.com/TPower2112/Writing-Sample-1
- github.comhttps://github.com/Tai-e/CVE-2021-44228
- github.comhttps://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit
- github.comhttps://github.com/TheArqsz/CVE-2021-44228-PoC
- github.comhttps://github.com/TheInterception/Log4J-Simulation-Tool
- github.comhttps://github.com/Timborin0/log4j-dork-scanner
- github.comhttps://github.com/Toolsec/log4j-scan
- github.comhttps://github.com/TotallyNotAHaxxer/f-for-java
- github.comhttps://github.com/ToxicEnvelope/XSYS-Log4J2Shell-Ex
- github.comhttps://github.com/VNYui/CVE-2021-44228
- github.comhttps://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j
- github.comhttps://github.com/VinniMarcon/Log4j-Updater
- github.comhttps://github.com/Vulnmachines/log4j-cve-2021-44228
- github.comhttps://github.com/Vulnmachines/log4jshell_CVE-2021-44228
- github.comhttps://github.com/WYSIIWYG/Log4J_0day_RCE
- github.comhttps://github.com/Wafeeq-Fareed/log4shell-exploitation-lab
- github.comhttps://github.com/WatchGuard-Threat-Lab/log4shell-iocs
- github.comhttps://github.com/Willian-2-0-0-1/Log4j-Exploit-CVE-2021-44228
- github.comhttps://github.com/Woahd/log4j-urlscanner
- github.comhttps://github.com/Y0-kan/Log4jShell-Scan
- github.comhttps://github.com/YangHyperData/LOGJ4_PocShell_CVE-2021-44228
- github.comhttps://github.com/ZacharyZcR/CVE-2021-44228
- github.comhttps://github.com/aajuvonen/log4stdin
- github.comhttps://github.com/aaronm-sysdig/log4j-vuln-demo
- github.comhttps://github.com/ab0x90/CVE-2021-44228_PoC
- github.comhttps://github.com/agylabs/log4shell-remediation
- github.comhttps://github.com/alenazi90/log4j
- github.comhttps://github.com/alexandre-lavoie/python-log4rce
- github.comhttps://github.com/alexandreroman/cve-2021-44228-workaround-buildpack
- github.comhttps://github.com/alexbakker/log4shell-tools
- github.comhttps://github.com/alexpena5635/CVE-2021-44228_scanner-main-Modified-
- github.comhttps://github.com/alpacamybags118/log4j-cve-2021-44228-sample
- github.comhttps://github.com/andalik/log4j-filescan
- github.comhttps://github.com/andrii-kovalenko-celonis/log4j-vulnerability-demo
- github.comhttps://github.com/andypitcher/Log4J_checker
- github.comhttps://github.com/ankur-katiyar/log4j-docker
- github.comhttps://github.com/anuvindhs/how-to-check-patch-secure-log4j-CVE-2021-44228
- github.comhttps://github.com/arabindadora/log4shell
- github.comhttps://github.com/arnaudluti/PS-CVE-2021-44228
- github.comhttps://github.com/arpitgupta369/log4shell-scanner
- github.comhttps://github.com/asd58584388/CVE-2021-44228
- github.comhttps://github.com/atlassion/RS4LOGJ-CVE-2021-44228
- github.comhttps://github.com/atlassion/log4j-exploit-builder
- github.comhttps://github.com/atnetws/fail2ban-log4j
- github.comhttps://github.com/authomize/log4j-log4shell-affected
- github.comhttps://github.com/avwolferen/Sitecore.Solr-log4j-mitigation
- github.comhttps://github.com/aws-samples/kubernetes-log4j-cve-2021-44228-node-agent
- github.comhttps://github.com/axelcurmi/log4shell-docker-lab
- github.comhttps://github.com/axisops/CVE-2021-44228
- github.comhttps://github.com/b-abderrahmane/CVE-2021-44228-playground
- github.comhttps://github.com/b1tm0n3r/CVE-2021-44228
- github.comhttps://github.com/back2root/log4shell-rex
- github.comhttps://github.com/badb33f/Apache-Log4j-POC
- github.comhttps://github.com/bcdunbar/CVE-2021-44228-poc
- github.comhttps://github.com/ben-smash/l4j-info
- github.comhttps://github.com/bhimsekhar/vulnerable-java-app
- github.comhttps://github.com/bhprin/log4j-vul
- github.comhttps://github.com/bigsizeme/Log4j-check
- github.comhttps://github.com/binganao/Log4j2-RCE
- github.comhttps://github.com/blake-fm/vcenter-log4j
- github.comhttps://github.com/boundaryx/cloudrasp-log4j2
- github.comhttps://github.com/bsigouin/log4shell-vulnerable-app
- github.comhttps://github.com/bumheehan/cve-2021-44228-log4j-test
- github.comhttps://github.com/byteboycn/CVE-2021-44228-Apache-Log4j-Rce
- github.comhttps://github.com/c3-h2/Log4j_Attacker_IPList
- github.comhttps://github.com/cado-security/log4shell
- github.comhttps://github.com/cbuschka/log4j2-rce-recap
- github.comhttps://github.com/chandru-gunasekaran/log4j-fix-CVE-2021-44228
- github.comhttps://github.com/chilit-nl/log4shell-example
- github.comhttps://github.com/chilliwebs/CVE-2021-44228_Example
- github.comhttps://github.com/christophetd/log4shell-vulnerable-app
- github.comhttps://github.com/claranet/ansible-role-log4shell
- github.comhttps://github.com/codiobert/log4j-scanner
- github.comhttps://github.com/corelight/cve-2021-44228
- github.comhttps://github.com/corneacristian/Log4J-CVE-2021-44228-RCE
- github.comhttps://github.com/corretto/hotpatch-for-apache-log4j2
- github.comhttps://github.com/cuijiung/log4j-CVE-2021-44228
- github.comhttps://github.com/cybersecurityworks553/log4j-shell-csw
- github.comhttps://github.com/cyberxml/log4j-poc
- github.comhttps://github.com/danieljosmariyan7254/TryHackMe-Solar-exploiting-log4j-
- github.comhttps://github.com/dark-ninja10/Log4j-CVE-2021-44228
- github.comhttps://github.com/darkarnium/Log4j-CVE-Detect
- github.comhttps://github.com/datadavev/test-44228
- github.comhttps://github.com/dave-ojumoola/CYB-401-CVE-2021-44228-Log4Shell
- github.comhttps://github.com/dbgee/CVE-2021-44228
- github.comhttps://github.com/dbzoo/log4j_scanner
- github.comhttps://github.com/dcm2406/CVE-Lab
- github.comhttps://github.com/demining/Log4j-Vulnerability
- github.comhttps://github.com/demonrvm/Log4ShellRemediation
- github.comhttps://github.com/didoatanasov/cve-2021-44228
- github.comhttps://github.com/digital-dev/Log4j-CVE-2021-44228-Remediation
- github.comhttps://github.com/dotPY-hax/log4py
- github.comhttps://github.com/dpomnean/log4j_scanner_wrapper
- github.comhttps://github.com/dtact/divd-2021-00038--log4j-scanner
- github.comhttps://github.com/errypie/TICKETS
- github.comhttps://github.com/eurogig/jankybank
- github.comhttps://github.com/f0ng/log4j2burpscanner
- github.comhttps://github.com/fabioeletto/hka-seminar-log4shell
- github.comhttps://github.com/faisalfs10x/Log4j2-CVE-2021-44228-revshell
- github.comhttps://github.com/felipe8398/ModSec-log4j2
- github.comhttps://github.com/felisha-elmer/Sandbox-Challenge-Log4Shell-CVE-2021-44228-
- github.comhttps://github.com/felixslama/log4shell-minecraft-demo
- github.comhttps://github.com/ferralon-demo/log4shell-chain
- github.comhttps://github.com/fireeye/CVE-2021-44228
- github.comhttps://github.com/fireflyingup/log4j-poc
- github.comhttps://github.com/fox-it/log4j-finder
- github.comhttps://github.com/fullhunt/log4j-scan
- github.comhttps://github.com/funcid/log4j-exploit-fork-bomb
- github.comhttps://github.com/future-client/CVE-2021-44228
- github.comhttps://github.com/gauthamg/log4j2021_vul_test
- github.comhttps://github.com/gcmurphy/chk_log4j
- github.comhttps://github.com/george-petrakis/log4j-scanner-CVE-2021-44228
- github.comhttps://github.com/giterlizzi/nmap-log4shell
- github.comhttps://github.com/greymd/CVE-2021-44228
- github.comhttps://github.com/grimch/log4j-CVE-2021-44228-workaround
- github.comhttps://github.com/guardicode/CVE-2021-44228_IoCs
- github.comhttps://github.com/guerzon/log4shellpoc
- github.comhttps://github.com/gyaansastra/CVE-2021-44228
- github.comhttps://github.com/hackinghippo/log4shell_ioc_ips
- github.comhttps://github.com/halibobor/log4j2
- github.comhttps://github.com/hassaanahmad813/log4j
- github.comhttps://github.com/helsecert/CVE-2021-44228
- github.comhttps://github.com/hmxh123/Log4Shell-Vulnerability-Replication
- github.comhttps://github.com/hoangvvthu/CVE-2021-44228-Log4Shell-Lab
- github.comhttps://github.com/honeynet/log4shell-data
- github.comhttps://github.com/horrister/log4shell-cve-2021-44228
- github.comhttps://github.com/hotpotcookie/CVE-2021-44228-white-box
- github.comhttps://github.com/hozyx/log4shell
- github.comhttps://github.com/immunityinc/Log4j-JNDIServer
- github.comhttps://github.com/inettgmbh/checkmk-log4j-scanner
- github.comhttps://github.com/infiniroot/nginx-mitigate-log4shell
- github.comhttps://github.com/intel-xeon/CVE-2021-44228---detection-with-PowerShell
- github.comhttps://github.com/irgoncalves/f5-waf-enforce-sig-CVE-2021-44228
- github.comhttps://github.com/irgoncalves/f5-waf-quick-patch-cve-2021-44228
- github.comhttps://github.com/isuruwa/Log4j
- github.comhttps://github.com/izzyacademy/log4shell-mitigation
- github.comhttps://github.com/j3kz/CVE-2021-44228-PoC
- github.comhttps://github.com/jacobtread/L4J-Vuln-Patch
- github.comhttps://github.com/jaehnri/CVE-2021-44228
- github.comhttps://github.com/jas502n/Log4j2-CVE-2021-44228
- github.comhttps://github.com/jdormannn/SecureOps-Lab
- github.comhttps://github.com/jeffbryner/log4j-docker-vaccine
- github.comhttps://github.com/jeffli1024/log4j-rce-test
- github.comhttps://github.com/jeremyrsellars/CVE-2021-44228_scanner
- github.comhttps://github.com/joaovicdev/EXPLOIT-CVE-2021-44228
- github.comhttps://github.com/jomjosh17/Log4Shell-CVE-2021-44228-
- github.comhttps://github.com/jrocia/Search-log4Jvuln-AppScanSTD
- github.comhttps://github.com/julian911015/Log4j-Scanner-Exploit
- github.comhttps://github.com/justakazh/Log4j-CVE-2021-44228
- github.comhttps://github.com/jxerome/log4shell
- github.comhttps://github.com/kal1gh0st/MyLog4Shell
- github.comhttps://github.com/kaleth4/CVE-2021-44228
- github.comhttps://github.com/kali-dass/CVE-2021-44228-log4Shell
- github.comhttps://github.com/kanitan/log4j2-web-vulnerable
- github.comhttps://github.com/kannthu/CVE-2021-44228-Apache-Log4j-Rce
- github.comhttps://github.com/khaidtraivch/CVE-2021-44228-Log4Shell-
- github.comhttps://github.com/kimobu/cve-2021-44228
- github.comhttps://github.com/kkyehit/log4j_CVE-2021-44228
- github.comhttps://github.com/korteke/log4shell-demo
- github.comhttps://github.com/kossatzd/log4j-CVE-2021-44228-test
- github.comhttps://github.com/kozmer/log4j-shell-poc
- github.comhttps://github.com/kubearmor/log4j-CVE-2021-44228
- github.comhttps://github.com/lathika-3006/Solar-exploiting-log-4j
- github.comhttps://github.com/leetxyz/CVE-2021-44228-Advisories
- github.comhttps://github.com/lfama/log4j_checker
- github.comhttps://github.com/lhotari/log4shell-mitigation-tester
- github.comhttps://github.com/lhotari/pulsar-docker-images-patch-CVE-2021-44228
- github.comhttps://github.com/limxuan/ehir-vuln-enterprise-login
- github.comhttps://github.com/logpresso/CVE-2021-44228-Scanner
- github.comhttps://github.com/lohanichaten/log4j-cve-2021-44228
- github.comhttps://github.com/lonecloud/CVE-2021-44228-Apache-Log4j
- github.comhttps://github.com/lov3r/cve-2021-44228-log4j-exploits
- github.comhttps://github.com/lucab85/ansible-role-log4shell
- github.comhttps://github.com/lucab85/log4j-cve-2021-44228
- github.comhttps://github.com/m0rath/detect-log4j-exploitable
- github.comhttps://github.com/madCdan/JndiLookup
- github.comhttps://github.com/manishkanyal/log4j-scanner
- github.comhttps://github.com/manuel-alvarez-alvarez/log4j-cve-2021-44228
- github.comhttps://github.com/many-fac3d-g0d/apache-tomcat-log4j
- github.comhttps://github.com/marcourbano/CVE-2021-44228
- github.comhttps://github.com/marklindsey11/-CVE-2021-44228_scanner-Applications-that-are-vulnerable-to-the-log4j-CVE-2021-44228-https-nvd.
- github.comhttps://github.com/marklindsey11/gh-repo-clone-marklindsey11--CVE-2021-44228_scanner-Applications-that-are-vulnerable-to-the-log4j-CV
- github.comhttps://github.com/markuman/aws-log4j-mitigations
- github.comhttps://github.com/maxant/log4j2-CVE-2021-44228
- github.comhttps://github.com/maximofernandezriera/CVE-2021-44228
- github.comhttps://github.com/mazhar-hassan/log4j-vulnerability
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-1
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-10
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-11
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-12
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-13
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-14
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-15
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-16
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-17
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-18
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-19
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-2
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-20
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-2025
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-2026
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-21
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-22
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-23
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-24
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-25
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-3
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-4
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-5
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-6
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-7
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-8
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-9
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-briefing
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-evidence
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-followup
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-lab
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-new
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-q4
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit-tracking
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit2
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-audit3
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-demo
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-drill
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-remediation
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-research-brief
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shell-security-audit
- github.comhttps://github.com/mcpmark-eval-liuhezi/log4shellsecurity-audit
- github.comhttps://github.com/mebibite/log4jhound
- github.comhttps://github.com/mergebase/log4j-detector
- github.comhttps://github.com/metodidavidovic/log4j-quick-scan
- github.comhttps://github.com/mgueye3/Log4Shell
- github.comhttps://github.com/michaelsanford/Log4Shell-Honeypot
- github.comhttps://github.com/mitiga/log4shell-cloud-scanner
- github.comhttps://github.com/mkhazamipour/log4j-vulnerable-app-cve-2021-44228-terraform
- github.comhttps://github.com/mklinkj/log4j2-test
- github.comhttps://github.com/mn-io/log4j-spring-vuln-poc
- github.comhttps://github.com/moften/Log4Shell
- github.comhttps://github.com/momos1337/Log4j-RCE
- github.comhttps://github.com/moshuum/tf-log4j-aws-poc
- github.comhttps://github.com/mr-r3b00t/CVE-2021-44228
- github.comhttps://github.com/mr-vill4in/log4j-fuzzer
- github.comhttps://github.com/mrlnstk/cve-2021-44228-minecraft-poc
- github.comhttps://github.com/mschmnet/Log4Shell-demo
- github.comhttps://github.com/mss/log4shell-hotfix-side-effect
- github.comhttps://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes
- github.comhttps://github.com/mufeedvh/log4jail
- github.comhttps://github.com/municipalparkingservices/CVE-2021-44228-Scanner
- github.comhttps://github.com/mzlogin/CVE-2021-44228-Demo
- github.comhttps://github.com/nccgroup/log4j-jndi-be-gone
- github.comhttps://github.com/nikolas-charalambidis/cve-2021-44228
- github.comhttps://github.com/nix-xin/vuln4japi
- github.comhttps://github.com/nkoneko/VictimApp
- github.comhttps://github.com/nu11secur1ty/CVE-2021-44228-VULN-APP
- github.comhttps://github.com/obscuritylabs/log4shell-poc-lab
- github.comhttps://github.com/ocastel/log4j-shell-poc
- github.comhttps://github.com/osflaky/exp-logpresso-CVE-2021-44228-Scanner
- github.comhttps://github.com/ossie-git/log4shell_sentinel
- github.comhttps://github.com/otaviokr/log4j-2021-vulnerability-study
- github.comhttps://github.com/p3dr16k/log4j-1.2.15-mod
- github.comhttps://github.com/paulvkitor/log4shellwithlog4j2_13_3
- github.comhttps://github.com/pedrohavay/exploit-CVE-2021-44228
- github.comhttps://github.com/perryflynn/find-log4j
- github.comhttps://github.com/ph0lk3r/anti-jndi
- github.comhttps://github.com/phoswald/sample-ldap-exploit
- github.comhttps://github.com/pierpaolosestito-dev/Log4Shell-CVE-2021-44228-PoC
- github.comhttps://github.com/pinaraltinok/Log4Shell-Attack
- github.comhttps://github.com/pmontesd/log4j-cve-2021-44228
- github.comhttps://github.com/pravin-pp/log4j2-CVE-2021-44228
- github.comhttps://github.com/prmawyer/log4shell-vulnerable-app
- github.comhttps://github.com/probablysecure/Triage-CVE-2021-44228-Log4Shell-Log4j-
- github.comhttps://github.com/puzzlepeaches/Log4jCenter
- github.comhttps://github.com/puzzlepeaches/Log4jHorizon
- github.comhttps://github.com/puzzlepeaches/Log4jUnifi
- github.comhttps://github.com/qingtengyun/cve-2021-44228-qingteng-online-patch
- github.comhttps://github.com/qingtengyun/cve-2021-44228-qingteng-patch
- github.comhttps://github.com/qw3rtyou/CVE-2021-44228_dockernize
- github.comhttps://github.com/r00thunter/Log4Shell
- github.comhttps://github.com/r00thunter/Log4Shell-Scanner
- github.comhttps://github.com/r3kind1e/Log4Shell-obfuscated-payloads-generator
- github.comhttps://github.com/ra890927/Log4Shell-CVE-2021-44228-Demo
- github.comhttps://github.com/racoon-rac/CVE-2021-44228
- github.comhttps://github.com/rakutentech/jndi-ldap-test-server
- github.comhttps://github.com/razureink/cve-2021-44228-log4shell_rce_reproduction
- github.comhttps://github.com/recanavar/vuln_spring_log4j2
- github.comhttps://github.com/redhuntlabs/Log4JHunt
- github.comhttps://github.com/rejupillai/log4j2-hack-springboot
- github.comhttps://github.com/rgl/log4j-log4shell-playground
- github.comhttps://github.com/rh-rahulshetty/log4shell-CVE-2021-44228
- github.comhttps://github.com/robrankin/cve-2021-44228-waf-tests
- github.comhttps://github.com/rodfer0x80/log4j2-prosecutor
- github.comhttps://github.com/romanutti/log4shell-vulnerable-app
- github.comhttps://github.com/roshanshibu/Odysseus
- github.comhttps://github.com/roticagas/CVE-2021-44228-Demo
- github.comhttps://github.com/roxas-tan/CVE-2021-44228
- github.comhttps://github.com/rrpeck-cybersec/threat-intelligence-log4shell-analysis
- github.comhttps://github.com/rubo77/log4j_checker_beta
- github.comhttps://github.com/rv4l3r3/log4v-vuln-check
- github.comhttps://github.com/s-retlaw/l4s_poc
- github.comhttps://github.com/s-retlaw/l4srs
- github.comhttps://github.com/safeer-accuknox/log4j-shell-poc
- github.comhttps://github.com/saharNooby/log4j-vulnerability-patcher-agent
- github.comhttps://github.com/sajanapamuditha/Cyber-Attack-Simulation-
- github.comhttps://github.com/sanasimran1403-jpg/log4shell
- github.comhttps://github.com/sandarenu/log4j2-issue-check
- github.comhttps://github.com/scabench/l4j-fp1
- github.comhttps://github.com/scabench/l4j-tp1
- github.comhttps://github.com/scheibling/py-log4shellscanner
- github.comhttps://github.com/sdogancesur/log4j_github_repository
- github.comhttps://github.com/sec13b/CVE-2021-44228-POC
- github.comhttps://github.com/sfr0435122531-ui/-log4shell-lab
- github.comhttps://github.com/shamo0/CVE-2021-44228
- github.comhttps://github.com/shivakumarjayaraman/log4jvulnerability-CVE-2021-44228
- github.comhttps://github.com/simonis/Log4jPatch
- github.comhttps://github.com/sinakeshmiri/log4jScan
- github.comhttps://github.com/snapattack/damn-vulnerable-log4j-app
- github.comhttps://github.com/snatalius/log4j2-CVE-2021-44228-poc-local
- github.comhttps://github.com/snow0715/log4j-Scan-Burpsuite
- github.comhttps://github.com/solitarysp/Log4j-CVE-2021-44228
- github.comhttps://github.com/sourcegraph/log4j-cve-code-search-resources
- github.comhttps://github.com/spasam/log4j2-exploit
- github.comhttps://github.com/sqsec/log4j2_CVE-2021-44228
- github.comhttps://github.com/srcporter/CVE-2021-44228
- github.comhttps://github.com/ssl-user-en/Log4j-Scanner-Exploit
- github.comhttps://github.com/ssl/scan4log4j
- github.comhttps://github.com/strawhatasif/log4j-test
- github.comhttps://github.com/stripe/log4j-remediation-tools
- github.comhttps://github.com/sud0x00/log4j-CVE-2021-44228
- github.comhttps://github.com/suniastar/scan-log4shell
- github.comhttps://github.com/sunnyvale-it/CVE-2021-44228-PoC
- github.comhttps://github.com/suuhm/log4shell4shell
- github.comhttps://github.com/sysadmin0815/Fix-Log4j-PowershellScript
- github.comhttps://github.com/tadash10/Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment
- github.comhttps://github.com/takito1812/log4j-detect
- github.comhttps://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce
- github.comhttps://github.com/tasooshi/horrors-log4shell
- github.comhttps://github.com/taurusxin/CVE-2021-44228
- github.comhttps://github.com/tharindudh/tharindudh-Log4j-Vulnerability-in-Ghidra-tool-CVE-2021-44228
- github.comhttps://github.com/thecyberneh/Log4j-RCE-Exploiter
- github.comhttps://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832
- github.comhttps://github.com/thomaspatzke/Log4Pot
- github.comhttps://github.com/threatmonit/Log4j-IOCs
- github.comhttps://github.com/tica506/Siem-queries-for-CVE-2021-44228
- github.comhttps://github.com/tieupham267/log4shell-coraza
- github.comhttps://github.com/timothyjxhn/DeliberatelyVulnerableWebApp
- github.comhttps://github.com/tobiasoed/log4j-CVE-2021-44228
- github.comhttps://github.com/toramanemre/apache-solr-log4j-CVE-2021-44228
- github.comhttps://github.com/toramanemre/log4j-rce-detect-waf-bypass
- github.comhttps://github.com/tpdlshdmlrkfmcla/Log4shell
- github.comhttps://github.com/trickyearlobe/inspec-log4j
- github.comhttps://github.com/tuyenee/Log4shell
- github.comhttps://github.com/twseptian/spring-boot-log4j-cve-2021-44228-docker-lab
- github.comhttps://github.com/ubitech/cve-2021-44228-rce-poc
- github.comhttps://github.com/uint0/cve-2021-44228--spring-hibernate
- github.comhttps://github.com/uint0/cve-2021-44228-helpers
- github.comhttps://github.com/unlimitedsola/log4j2-rce-poc
- github.comhttps://github.com/urholaukkarinen/docker-log4shell
- github.comhttps://github.com/vino-theva/CVE-2021-44228
- github.comhttps://github.com/vorburger/Log4j_CVE-2021-44228
- github.comhttps://github.com/vulnerable-apps/log4shell-honeypot
- github.comhttps://github.com/vutiendat323/CVE-2021-44228_Log4Shell
- github.comhttps://github.com/wajda/log4shell-test-exploit
- github.comhttps://github.com/wheezysec/CVE-2021-44228-kusto
- github.comhttps://github.com/winnpixie/log4noshell
- github.comhttps://github.com/wmohamed2033/wmohamed2033.github.io
- github.comhttps://github.com/wortell/log4j
- github.comhttps://github.com/x1ongsec/CVE-2021-44228-Log4j-JNDI
- github.comhttps://github.com/xsultan/log4jshield
- github.comhttps://github.com/y-security/yLog4j
- github.comhttps://github.com/yadavmukesh/Log4Shell-vulnerability-CVE-2021-44228-
- github.comhttps://github.com/yanghaoi/CVE-2021-44228_Log4Shell
- github.comhttps://github.com/ycdxsb/Log4Shell-CVE-2021-44228-ENV
- github.comhttps://github.com/yesspider-hacker/log4j-payload-generator
- github.comhttps://github.com/yili-soc/vm-homelab-log4shell-assessment
- github.comhttps://github.com/yuuki1967/CVE-2021-44228-Apache-Log4j-Rce
- github.comhttps://github.com/zaneef/CVE-2021-44228
- github.comhttps://github.com/zhangxvx/Log4j-Rec-CVE-2021-44228
- github.comhttps://github.com/zlepper/CVE-2021-44228-Test-Server
- github.comhttps://github.com/zsolt-halo/Log4J-Log4Shell-CVE-2021-44228-Spring-Boot-Test-Service
- github.comhttps://github.com/zzzz0317/log4j2-vulnerable-spring-app
06 // ЦИТИРОВАНИЕ ДАННЫХ И ИСТОЧНИК
Для включения аналитической карточки в отчёты по безопасности, матрицы рисков или исследовательские публикации используйте стандартизированный формат цитирования:
Библиографическая ссылка (Plain text)
CVE Futuretools (2026). Анализ уязвимости CVE-2021-44228: Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints. URL: https://cve.futuretools.ru/cve/CVE-2021-44228
BibTeX формат (LaTeX)
@misc{cve_futuretools_cve_2021_44228,
title = {{CVE-2021-44228: Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints}},
author = {{CVE Futuretools}},
year = {2026},
howpublished = {\url{https://cve.futuretools.ru/cve/CVE-2021-44228}},
note = {Оперативный инженерный анализ киберугроз}
}