Skip to content

Instantly share code, notes, and snippets.

View ahaslett's full-sized avatar

ahaslett

8 followers · 11 following
View GitHub Profile
@ahaslett
ahaslett / log4j_rce_detection.md
Created December 10, 2021 20:23 — forked from Neo23x0/log4j_rce_detection.md
Log4j RCE CVE-2021-44228 Exploitation Detection

log4j RCE Exploitation Detection

You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228

Grep / Zgrep

This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders

sudo egrep -i -r '\$\{jndi:(ldap[s]?|rmi|dns):/[^\n]+' /var/log
@ahaslett
ahaslett / resources.md
Created July 7, 2021 14:52 — forked from muff-in/resources.md
A curated list of Assembly Language / Reversing / Malware Analysis / Game Hacking-resources