martin-mueller-cemas

## log4j_rce_detection.md

      
              1 file
            
          
              72 forks
            
          
              70 comments
            
          
              511 stars
            
          
                Neo23x0
                / log4j_rce_detection.md
            
            
              Last active
              June 24, 2024 22:11
            
              
                Log4j RCE CVE-2021-44228 Exploitation Detection
              
          
    log4j RCE Exploitation Detection

You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228
Grep / Zgrep

This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders
sudo egrep -I -i -r '\$(\{|%7B)jndi:(ldap[s]?|rmi|dns|nis|iiop|corba|nds|http):/[^\n]+' /var/log

  
## README.md

      
              3 files
            
          
              37 forks
            
          
              21 comments
            
          
              236 stars
            
          
                hubgit
                / README.md
            
            
              Last active
              June 14, 2024 17:40
            
              
                Remove metadata from a PDF file, using exiftool and qpdf. Note that embedded objects may still contain metadata.
              
          
    Anonymising PDFs

PDF metadata

Metadata in PDF files can be stored in at least two places:

the Info Dictionary, a limited set of key/value pairs
XMP packets, which contain RDF statements expressed as XML

PDF files