Neo23x0

log4j RCE Exploitation Detection

You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228

Grep / Zgrep

This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders

sudo egrep -I -i -r '\$(\{|%7B)jndi:(ldap[s]?|rmi|dns|nis|iiop|corba|nds|http):/[^\n]+' /var/log

SuperMarioSF

GPG + Git SSH Authentication and Signing on Windows 10

Edit (2021-10-31, SuperMarioSF):

• fixed: missing --force for wsl-ssh-pagent, which caused not to able to launch wsl-ssh-pagent when there already file created.
• fixed: missing guide for WinSSH ssh-add enviornment variable SSH_AUTH_SOCK. （Thanks @landfillbaby for information in original gist comment)

Introduction

This simple Gist will explain how to settup your GPG key to work for SSH authentication (with Git) and Git commit signing on Windows 10. This may seem straightforward on Linux, but there are certain tweaks needed on Windows.

hawkins

#!/usr/bin/env python3

from http.server import BaseHTTPRequestHandler, HTTPServer

class S(BaseHTTPRequestHandler):
    def _set_headers(self):
        self.send_response(200)
        self.send_header('Content-type', 'text/html')
        self.end_headers()