You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228
This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders
sudo egrep -I -i -r '\$(\{|%7B)jndi:(ldap[s]?|rmi|dns|nis|iiop|corba|nds|http):/[^\n]+' /var/log
| #!/usr/bin/env zsh | |
| # | |
| # # About | |
| # | |
| # Since APFS supports de-duplication on block-level, it can be useful to | |
| # manually de-duplicate your files if you've migrated/upgrade to APFS not | |
| # using a fresh install. | |
| # | |
| # I've written this simple script with the aim to: | |
| # - Be simple, easy to read and understand (for users to check) |
| Mute these words in your settings here: https://twitter.com/settings/muted_keywords | |
| ActivityTweet | |
| generic_activity_highlights | |
| generic_activity_momentsbreaking | |
| RankedOrganicTweet | |
| suggest_activity | |
| suggest_activity_feed | |
| suggest_activity_highlights | |
| suggest_activity_tweet |
| <?xml version="1.0"?> | |
| <profile name="Original Prusa i3 MK2" version="2017-07-16 09:26:29" app="S3D-Software 3.1.1"> | |
| <baseProfile>Default</baseProfile> | |
| <printMaterial>PLA</printMaterial> | |
| <printQuality>Normal 0.2</printQuality> | |
| <printExtruders></printExtruders> | |
| <extruder name="Primary Extruder"> | |
| <toolheadNumber>0</toolheadNumber> | |
| <diameter>0.4</diameter> | |
| <autoWidth>0</autoWidth> |
| // Just before switching jobs: | |
| // Add one of these. | |
| // Preferably into the same commit where you do a large merge. | |
| // | |
| // This started as a tweet with a joke of "C++ pro-tip: #define private public", | |
| // and then it quickly escalated into more and more evil suggestions. | |
| // I've tried to capture interesting suggestions here. | |
| // | |
| // Contributors: @r2d2rigo, @joeldevahl, @msinilo, @_Humus_, | |
| // @YuriyODonnell, @rygorous, @cmuratori, @mike_acton, @grumpygiant, |