This gist gather a list of log4shell payloads seen on my twitter feeds.
💨 I will update it every time I see new payloads.
The goal is to allows testing detection regexes defined in protection systems.
progS1m
righettod
/ log4shell-payloads.md
Last active
December 18, 2023 06:41
List of log4shell payloads seen on my twitter feeds
busch
/ gist:7df1a7175e580b4266c8ba1f7606ed7e
Created
December 10, 2021 23:45
Citrix ADC content switching policy expression for log4j RCE CVE-2021-44228
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| HTTP.REQ.FULL_HEADER.SET_TEXT_MODE(IGNORECASE).CONTAINS("jndi:ldap") || | |
| HTTP.REQ.FULL_HEADER.SET_TEXT_MODE(IGNORECASE).CONTAINS("jndi:ldaps") || | |
| HTTP.REQ.FULL_HEADER.SET_TEXT_MODE(IGNORECASE).CONTAINS("jndi:rmi") || | |
| HTTP.REQ.FULL_HEADER.SET_TEXT_MODE(IGNORECASE).CONTAINS("jndi:dns") || | |
| HTTP.REQ.URL.SET_TEXT_MODE(IGNORECASE).CONTAINS("jndi:ldap") || | |
| HTTP.REQ.URL.SET_TEXT_MODE(IGNORECASE).CONTAINS("jndi:ldaps") || | |
| HTTP.REQ.URL.SET_TEXT_MODE(IGNORECASE).CONTAINS("jndi:rmi") || | |
| HTTP.REQ.URL.SET_TEXT_MODE(IGNORECASE).CONTAINS("jndi:dns") || | |
| HTTP.REQ.BODY(50000).SET_TEXT_MODE(IGNORECASE).CONTAINS("jndi:ldap") || | |
| HTTP.REQ.BODY(50000).SET_TEXT_MODE(IGNORECASE).CONTAINS("jndi:ldaps") || |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Reference source snippets | |
| [[snippets]] | |
| description = "Reference Cheat Sheet" | |
| command = "start https://kubernetes.io/docs/reference/kubectl/cheatsheet/" | |
| tag = ["reference"] | |
| output = "" | |
| # Setup snippets |
sscotth
/ keystroke the clipboard extended.workflow
Last active
September 7, 2025 09:08
Paste as keystrokes (macOS)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Why? | |
| # To paste text into windows that normally don't allow it or have access to the clipboard. | |
| # Examples: Virtual machines that do not yet have tools installed, websites that hijack paste | |
| # | |
| # Extended vs Simple? | |
| # * Includes an initial delay to allow you to change active windows | |
| # * Adds small delay between keypresses for slower responding windows like SSH sessions | |
| # * Better handling of numbers | |
| # * VMWare bug fix | |
| # |
avivey
/ download and build git
Last active
September 5, 2022 16:25
install git from source (For Ubuntu)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| cd /tmp | |
| wget -O git.zip https://github.com/git/git/archive/master.zip | |
| unzip git.zip | |
| cd git-* | |
| sudo apt-get install make autoconf libcurl4-gnutls-dev gettext gcc zlib1g-dev | |
| make configure | |
| ./configure --prefix=/usr --without-tcltk | |
| make all |