## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-WINNPIXIE-LOG4NOSHELL
# Log4NoShell
A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 ("Log4Shell").
If possible, update your program to use the latest Log4J version, as the vulnerability is fixed as of version _2.17.1_. Otherwise, download log4noshell-0.8.1.jar and continue reading.
## Usage
To use Java Agents, you must specify them with the `-javaagent` argument.
`java -javaagent:path/to/log4noshell-0.8.1.jar -jar Program.jar`
### **Minecraft**
> [!TIP] Please read Mojang's response to determine if you might need this patcher.
* Client:
1. Go to the _Installations_ tab in the launcher
2. Click on the **three dots** on the **right** side of the version you'd like to use
3. Click _Edit_
4. Scroll down and click on _More Options_
5. Add `-javaagent:path/to/log4noshell-0.8.1.jar` to the _JVM Arguments_ text-field
* `-javaagent:path/to/log4noshell-0.8.1.jar -Xms2G -Xms2G...`
6. Click _Save_
* Server:
1. Add `-javaagent:path/to/log4noshell-0.8.1.jar` somewhere before the `-jar` in your launch/start/run command
* `java -javaagent:path/to/log4noshell-0.8.1.jar -jar minecraft_server.jar`