ibidani

Security Advisories / Bulletins linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

• If you want to add a link, comment or send it to me
• Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Other great ressources

• Royce Williams list is different, listed by vendors responses:
• https://www.techsolvency.com/story-so-far/cve-2021-44228-log4j-log4shell/
• TBD

ibidani

#!/usr/bin/python
import stashy
import requests
from requests.auth import HTTPBasicAuth

# User to be granted access to
user = ""

bitbucket_url = "https://SERVER_URL"
bitbucket_username= "<bitbucket_username>"

ibidani

#!/bin/sh
#/jffs/scripts/firewall-start - in the Asus Merlin
#for i in `curl https://www.cloudflare.com/ips-v4`; do iptables -I INPUT -p tcp -m multiport --dports 8443 -s $i -j ACCEPT; done
# https://github.com/RMerl/asuswrt-merlin.ng/wiki/Iptables-tips
# https://gist.github.com/Manouchehri/cdd4e56db6596e7c3c5a
for i in `curl https://www.cloudflare.com/ips-v4`; do iptables -I VSERVER --table nat --proto tcp --match tcp --source $i --dport 8443 --jump DNAT --to-destination LOCAL_IP; done

ibidani

<#
.SYNOPSIS
  This script prints the owner of each of the Distribution Lists in a CSV file
.DESCRIPTION
  <Brief description of script>
.INPUTS
  CSV file with list of Distribution Lists to query
.OUTPUTS
  <Outputs if any, otherwise state None - example: Log file stored in C:\Windows\Temp\<name>.log>
.NOTES

ibidani

{
  "installed": {
    "client_id": "CLIENT_ID_GOES_HERE.apps.googleusercontent.com",
    "project_id": "<API_PROJECT>",
    "auth_uri": "https://accounts.google.com/o/oauth2/auth",
    "token_uri": "https://accounts.google.com/o/oauth2/token",
    "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
    "client_secret": "<SECRET_GOES_HERE>",
    "redirect_uris": [
      "urn:ietf:wg:oauth:2.0:oob",

ibidani

def qaCatalinaBase = '/opt/apache-tomcat-8-qa'
def qaHttpPort = 8081

def stagingCatalinaBase = '/opt/apache-tomcat-8-staging'
def stagingHttpPort = 8082

def perfsCatalinaBase = '/opt/apache-tomcat-8-perfs'
def perfsHttpPort = 8084

def productionCatalinaBase = '/opt/apache-tomcat-8-production'