Neo23x0

log4j RCE Exploitation Detection

You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228

Grep / Zgrep

This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders

sudo egrep -I -i -r '\$(\{|%7B)jndi:(ldap[s]?|rmi|dns|nis|iiop|corba|nds|http):/[^\n]+' /var/log

DaWe35

/*
1) Open https://popcat.click
2) Open console (F12)
3) Insert code & run
*/


var event = new KeyboardEvent('keydown', {
	key: 'g',
	ctrlKey: true

tpai

1. install

brew install tor
brew install privoxy

2. copy and modify config file

hogelog

#!/usr/bin/python
 
# Import PySide classes
import sys
from PySide.QtCore import *
from PySide.QtGui import *
 

class App:
  def __init__(self):

MikeRogers0

<?php
echo file_get_contents('http://tinyurl.com/api-create.php?url='.'http://www.example.com/');

/* For example
http://tinyurl.com/api-create.php?url=http://www.fullondesign.co.uk/

Would return:
http://tinyurl.com/d4px9f
*/
?>

jtriley

#!/usr/bin/env python
import os
import shlex
import struct
import platform
import subprocess
 
 
def get_terminal_size():
    """ getTerminalSize()