log4shell-poc-py
POC for detecting the Log4Shell (Log4J RCE) vulnerability.
Run on a system with python3 python3 log4shell-poc.py
pathToTargetFile- containing a list of targets (targets are seperated by newlines)InteractionURL- the endpoint used to monitor out of band data extraction or interactions, e.g: https://github.com/projectdiscovery/interactsh
Example Output
[1] Testing asset: http://
[2] Testing asset: http://
[3] Testing asset: http://
[4] Testing asset: http://
[5] Testing asset: http://
[6] Testing asset: http://
[7] Testing asset: http://
Interaction Results
The example output as seen on the interactor due to a the Log4J vulnerability being found in an asset.
;; ANSWER SECTION:
.
. 3600 IN A
;; AUTHORITY SECTION:
.
. 3600 IN NS ns1.
.
.
. 3600 IN NS ns2.
.
42 Aug 09, 2022
29 Dec 16, 2022
867 Dec 22, 2022
39 Nov 21, 2022
50 Dec 26, 2022
1.9k Dec 30, 2022
33 Sep 28, 2022
5 Mar 21, 2022
172 Nov 17, 2022
589 Dec 30, 2022
108 Jan 07, 2023
1 Jan 30, 2022
212 Dec 24, 2022
1.5k Jan 02, 2023
41 Dec 30, 2022
79 Dec 27, 2022
23 Dec 17, 2022
576 Dec 23, 2022
22 Oct 17, 2022
171 Nov 28, 2022