#Log4shell

#Log4shell 2021

NEW on #Log4Shell... Inside the code: How the Log4Shell exploit works 1/21

If you have LDAP servers inside your network, or trust external 3rd-party ones, and either of them allow the schema attributes javaClassName, javaCodeBase or javaSerializedObject as writable, you should be making sure attackers aren't using them for #Log4j #Log4Shell

Docker Hub public Log4Shell detection is now live on Docker Official Images. Check the status of #Log4Shell remediation directly from #DockerHub here:

FireEye has released a public repo to facilitate hunting for IOC related to the #log4j vulnerability. Shout out to @0xF2EDCA5A and Elazar Broad! #log4shell #infosec

Probably one of the best curated lists on affected systems for Log4j side of the house: #Log4J #Log4Shell

Published some data from my #Log4Shell honeypot ( instances: • raw exploits: • deobfuscated exploits: • URLs: CSVs are updated every 6 hours.

The events of the day in a nutshell #log4shell

10 #Log4Shell Facts vs Fiction: a 🧵 1. 1.x is NOT vuln to this RCE. While it doesn't have another RCE, it requires access to send serialized data to a listener ON the log server. This is much MUCH harder to exploit and kind of rare for a Log4j server to be running.

How to test your apps for #log4shell vulnerability 1. Generate a DNS token 2. Wrap that token in Prefix: ${jndi:ldap:// Suffix: /a} 3. Use that value in search forms, profile data, settings etc. of your apps 4. Get notified when you triggered a reaction

Glad we're safe for now. #log4shell

I fell in love with #Log4Shell again; 4 P1s in a row. Its a simple recon and understanding where to spray the payload. This tweet is for you haters who made fun of my recent Log4Shell post. #BugBounty

Get-Log4shellVuln.ps1 #PowerShell script scans all local drives for presence of log4j jar files and analyzes the contents of the jar file to determine if it is vulnerable to #log4shell (CVE-2021-44228) vulnerability

Considering the extraordinary situation now as the IT world is fighting #Log4Shell, Runecast is offering a free vulnerability scan to help customers discover vulnerable #log4j instances in their #Windows, #Linux and #VMware environments. 👉 Request here:

A critical zero-day flaw in Apache #Log4j 2 was made publicly known, which can allow a remote attacker to execute code on a target system with the same privileges as an app using Apache Log4j 2. Read Red Hat’s advisory on CVE-2021-44228 or #Log4Shell:

The worst game #log4j #Log4Shell

the patching will continue until morale improves #log4j #log4shell

How to test your apps for #log4shell vulnerability ? 1. Go to 2. Enter your email-ID and generate a Log4shell token. 3. Use that value in search forms, profile data, settings etc. of your target apps. 5. Get notified via #email after #payload triggered.

🛡️BlueTeam CheatSheet * #Log4Shell CVE-2021-44228* | Last updated: 2021-12-11 0040 UTC ↘️