log4shell-poc-py
POC for detecting the Log4Shell (Log4J RCE) vulnerability.
Run on a system with python3 python3 log4shell-poc.py
pathToTargetFile- containing a list of targets (targets are seperated by newlines)InteractionURL- the endpoint used to monitor out of band data extraction or interactions, e.g: https://github.com/projectdiscovery/interactsh
Example Output
[1] Testing asset: http://
[2] Testing asset: http://
[3] Testing asset: http://
[4] Testing asset: http://
[5] Testing asset: http://
[6] Testing asset: http://
[7] Testing asset: http://
Interaction Results
The example output as seen on the interactor due to a the Log4J vulnerability being found in an asset.
;; ANSWER SECTION:
.
. 3600 IN A
;; AUTHORITY SECTION:
.
. 3600 IN NS ns1.
.
.
. 3600 IN NS ns2.
.
2 Sep 12, 2022
12 Nov 22, 2022
20 Apr 07, 2022
50 Dec 26, 2022
2 Nov 30, 2021
7 Sep 30, 2022
3 Jul 23, 2022
146 Dec 31, 2022
1.9k Dec 30, 2022
1 Dec 25, 2021
2 May 16, 2022
98 Dec 26, 2022
1 Dec 09, 2021
1 Nov 25, 2021
15 May 21, 2022
1 Jan 27, 2022
576 Dec 23, 2022
29 Jul 27, 2021
2 May 06, 2022
27 Dec 20, 2022