hanhvietphan

log4j RCE Exploitation Detection

You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228

Grep / Zgrep

This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders

sudo egrep -i -r '\$\{jndi:(ldap[s]?|rmi|dns):/[^\n]+' /var/log

hanhvietphan

Sub saveAsPdf()

Dim INVOICE, MCD, PL1, STD, PO As Worksheet

Dim inVoice_Name As String
Dim mcd_Name As String
Dim lp1_Name As String
Dim std_Name As String
Dim id_PO As String

hanhvietphan

Assembly Language / Reversing / Malware Analysis -resources

⭐Assembly Language

hanhvietphan

Anonymising PDFs

PDF metadata

Metadata in PDF files can be stored in at least two places:

• the Info Dictionary, a limited set of key/value pairs
• XMP packets, which contain RDF statements expressed as XML

PDF files