GitHub - davidbombal/log4jminecraft
source link: https://github.com/davidbombal/log4jminecraft
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
log4jminecraft
This code DOES NOT promote or encourage any illegal activities! The content in this document is provided solely for educational purposes and to create awareness!
Watch a video showing the process here: https://youtu.be/efnluUK_w_U
To run this project follow the following steps:
- Clone the repository:
git clone https://github.com/davidbombal/log4jminecraft.git
- Run the script log4j.py (
python3 log4j.py <ip_address>
i.e.python3 log4j.py 192.168.1.132
). This installs the prerequisite software, and also starts up the LDAP server. - Run the script jcomp_pyserv.py (
python3 jcomp_pyserv.py
). This compiles the Java payload to be ran, and also starts a python3 http.server.
Acknowledgement for contributions:
- John Hammond : https://youtu.be/7qoPDq41xhQ
- Moritz Bechler (For creating the Java Unmarshaller Security - MarshalSec) : https://github.com/mbechler/marshalsec
- xiajun325 for clear instruction on how to use the MarshalSec tool : https://github.com/xiajun325/apache-log4j-rce-poc
Recommend
-
192
Calcflow A Virtual Reality Tool for Mathematical Modeling! The repository contains the open-sourced code to Calcflow, a powerful mathematical visualization tool designed to give students, educators, and engineers a better grasp on...
-
212
Release 5.0 · javaee/glassfish · GitHub ...
-
460
README.md ViaBTC Exchange Server ViaBTC Exchange Server is a trading backend with high-speed performance, designed for cryptocurrency exchanges. It can...
-
200
Pytorch Exercises Pytorch is one of the most popular deep learning libraries as of 2017. One possible way of familiarizing yourself with it, I think, is to practice with simple quizzes. That's where this project comes in. The outline will...
-
109
Bytom Official golang implementation of the Bytom protocol. Automated builds are available for stable releases and the unstable master branch. Binary archives are published at
-
336
Welcome to tmux! tmux is a terminal multiplexer: it enables a number of terminals to be created, accessed, and controlled from a single screen. tmux may be detached from a screen and continue running in the background, then later reattach...
-
180
-
219
Spring Boot
-
378
惊鸿一瞥 这是一个可以帮助你在命令行中完成Github的各种操作的cli工具。 创建它的初衷是因为我是一个命令行狂热爱好者,与此同时我也是一个Github的fans,每当我在命令行环境中进行开发工作时,如果此时我想看看Github上又诞生了什么新的有趣的开源项
-
11
Files Permalink Latest commit message Commit time
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK