CVE-2021-44228

[trickest-workflows]

CVE-2021-44228

Description

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

POC

Reference

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
• https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228

Github

• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/helsecert/CVE-2021-44228
• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
• https://github.com/helsecert/CVE-2021-44228
• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832
• https://github.com/zane00/CVE-2021-44228
• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/0-x-2-2/CVE-2021-44228
• https://github.com/0x3SC4L4T3/Apache-Log4j-POC
• https://github.com/0xCyberY/CVE-T4PDF
• https://github.com/0xDexter0us/Log4J-Scanner
• https://github.com/0xInfection/LogMePwn
• https://github.com/0xRyan/log4j-nullroute
• https://github.com/0xThiebaut/CVE-2021-44228
• https://github.com/0xalwayslucky/log4j-polkit-poc
• https://github.com/0xj3lly/l4jScan
• https://github.com/0xlittleboy/One-Liner-Scripts
• https://github.com/0xsyr0/Log4Shell
• https://github.com/0xsyr0/OSCP
• https://github.com/111coding/log4j_temp_CVE-2021-44228
• https://github.com/1124352355/main
• https://github.com/1in9e/Apache-Log4j2-RCE
• https://github.com/1lann/log4shelldetect
• https://github.com/34zY/JNDI-Exploit-1.2-log4shell
• https://github.com/3llio0T/Active-
• https://github.com/4jfinder/4jfinder.github.io
• https://github.com/5ur35n/log4j-test
• https://github.com/ADP-Dynatrace/dt-appsec-powerup
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Adikso/minecraft-log4j-honeypot
• https://github.com/AkaneHQSec/Log4J-
• https://github.com/AlbusSec/Log4shell-Vulnerability-Scanner
• https://github.com/AlexanderBrese/ubiquitous-octo-guacamole
• https://github.com/AlexandreHeroux/Fix-CVE-2021-44228
• https://github.com/Amovane/java-eco-RCE-examples
• https://github.com/AnYi-Sec/Log4j-CVE-2021-44228-EXP
• https://github.com/Ananya-0306/Log-4j-scanner
• https://github.com/AndriyKalashnykov/spring-on-k8s
• https://github.com/Anonymous-Phunter/PHunter
• https://github.com/Apipia/log4j-pcap-activity
• https://github.com/ArkAngeL43/f-for-java
• https://github.com/Artideusz/Log4Shell_App
• https://github.com/Aschen/log4j-patched
• https://github.com/Astrogeorgeonethree/Starred
• https://github.com/Aviral18/log4j2-exploit-detect
• https://github.com/Awrrays/FrameVul
• https://github.com/Azeemering/CVE-2021-44228-DFIR-Notes
• https://github.com/BJLIYANLIANG/log4j-scanner
• https://github.com/BabooPan/Log4Shell-CVE-2021-44228-Demo
• https://github.com/BachoSeven/stellestelline
• https://github.com/BinaryDefense/log4j-honeypot-flask
• https://github.com/BlackwolfComputing/log4j_Scanner_ps1
• https://github.com/C2ActiveThreatHunters/ThreatHunting-for-Log4j
• https://github.com/CERTCC/CVE-2021-44228_scanner
• https://github.com/CUBETIQ/cubetiq-security-advisors
• https://github.com/Camphul/log4shell-spring-framework-research
• https://github.com/Chal13W1zz/Log4jExploitDemo
• https://github.com/ChandanShastri/Log4j_Vulnerability_Demo
• https://github.com/ChoiSG/log4shell-dockerlab
• https://github.com/ChriSanders22/Log4Shell-detector
• https://github.com/ClaudeStabile/Openfire-Pade-Cluster
• https://github.com/ClaudeStabile/PadeOpenfireDockerMode
• https://github.com/CodeShield-Security/Log4JShell-Bytecode-Detector
• https://github.com/ColdFusionX/CVE-2021-44228-Log4Shell-POC
• https://github.com/Contrast-Security-OSS/CVE-2021-44228
• https://github.com/Cosmo-Tech/azure-digital-twins-simulator-connector
• https://github.com/CptBluebear/Log4ShellDemo
• https://github.com/CptOfEvilMinions/ChooseYourSIEMAdventure
• https://github.com/CrackerCat/CVE-2021-44228-Log4j-Payloads
• https://github.com/Crane-Mocker/log4j-poc
• https://github.com/CreeperHost/Log4jPatcher
• https://github.com/Cyb3rWard0g/log4jshell-lab
• https://github.com/CyberControlNess/Log4j
• https://github.com/Cybereason/Logout4Shell
• https://github.com/CypherpunkSamurai/here-be-stars
• https://github.com/DANSI/PowerShell-Log4J-Scanner
• https://github.com/DXC-StrikeForce/Burp-Log4j-HammerTime
• https://github.com/DaveCrown/vmware-kb87081
• https://github.com/DavidHoenisch/File-Nabber
• https://github.com/Dghpi9/Log4j2-Fuzz
• https://github.com/Dhanushka-Sasanka/log4J-vulnerabllity-checker
• https://github.com/DiCanio/CVE-2021-44228-docker-example
• https://github.com/Diverto/nse-log4shell
• https://github.com/Dmitriy-area51/Exploit
• https://github.com/Doenerstyle/1.7.10-modded-bukkit-servers
• https://github.com/DomdogSec/NodeSecurityShield
• https://github.com/DouShaoxun/spring-boot-log
• https://github.com/DragonSurvivalEU/RCE
• https://github.com/Dynatrace-Asad-Ali/appsecutil
• https://github.com/EMSeek/log4poc
• https://github.com/Edward760609/log4jdockerfile
• https://github.com/ElJeffroz/log4j-poc
• https://github.com/EmergingThreats/log4shell-detection
• https://github.com/EpicCoffee/log4j-vulnerability
• https://github.com/EricMedina024/JndiLookupRemover
• https://github.com/ExploitPwner/CVE-2021-44228-Mass-RCE-Log4j
• https://github.com/Fantantonio/UNIVR-FSP-2022-Project
• https://github.com/Fazmin/vCenter-Server-Workaround-Script-CVE-2021-44228
• https://github.com/FeryaelJustice/Log4Shell
• https://github.com/Forescout/log4j_response
• https://github.com/GITTHUBBD/-VEC-05-02-
• https://github.com/GITTHUBBD/https-github.com-GITTHUBBD-pyi
• https://github.com/GITTHUBBD/iul
• https://github.com/GITTHUBBD/pyi
• https://github.com/GITTHUBBD/r0ti
• https://github.com/Ghost-chu/CVE-2021-44228-quickfix-script
• https://github.com/Gitnerd-1/ansible-log4j-mitigate-JndiLookup
• https://github.com/Glease/Healer
• https://github.com/GluuFederation/Log4J
• https://github.com/GoVanguard/Log4jShell_Scanner
• https://github.com/GoVanguard/Log4jShell_Vulnerable_Site
• https://github.com/Goqi/ELong
• https://github.com/GreenDelta/search-wrapper-es-rest
• https://github.com/GroupePSA/log4shell-honeypot
• https://github.com/Grupo-Kapa-7/CVE-2021-44228-Log4j-PoC-RCE
• https://github.com/Gyrfalc0n/scanlist-log4j
• https://github.com/H0j3n/EzpzCheatSheet
• https://github.com/H4ckTh3W0r1d/Apache_Log4j2_RCE
• https://github.com/Hack-with-8k0b/log4j-poc
• https://github.com/HackJava/HackLog4j2
• https://github.com/Hava-Kantrowitz/Log4j
• https://github.com/HaveFun83/awesome-stars
• https://github.com/HelifeWasTaken/log4j
• https://github.com/HenryFBP/JNDI-Exploit-Server
• https://github.com/Hololm/MCMetasploit
• https://github.com/HxDDD/CVE-PoC
• https://github.com/HyCraftHD/Log4J-RCE-Proof-Of-Concept
• https://github.com/Hydragyrum/evil-rmi-server
• https://github.com/HynekPetrak/log4shell-finder
• https://github.com/ITF-Education/ITF-log4shell-vulnapp
• https://github.com/Ilovewomen/db_script_v2
• https://github.com/Ilovewomen/db_script_v2_2
• https://github.com/J0B10/Minzomat
• https://github.com/J0B10/Voteban
• https://github.com/JOG-NTMK/log4shell-exploit
• https://github.com/JagarYousef/log4j-dork-scanner
• https://github.com/Jean-Francois-C/Windows-Penetration-Testing
• https://github.com/Jeromeyoung/log4j2burpscanner
• https://github.com/JianlinSun/log4j2-vulnerability-reproduce
• https://github.com/JiuBanSec/Log4j-CVE-2021-44228
• https://github.com/Joefreedy/Log4j-Windows-Scanner
• https://github.com/Jun-5heng/CVE-2021-44228
• https://github.com/JustinDPerkins/C1-WS-LOG4SHELL
• https://github.com/KainsRache/anti-jndi
• https://github.com/KatsutoshiOtogawa/log4j2_exploit
• https://github.com/KeysAU/Get-log4j-Windows-local
• https://github.com/KeysAU/Get-log4j-Windows.ps1
• https://github.com/KleekEthicalHacking/log4j-exploit
• https://github.com/Kloudle/vulnerable-log4j-jar-hashes
• https://github.com/Kommune-CSIRT-org/Log4J-Scanner
• https://github.com/KosmX/CVE-2021-44228-example
• https://github.com/Koupah/MC-Log4j-Patcher
• https://github.com/Kr0ff/CVE-2021-44228
• https://github.com/Labout/log4shell-rmi-poc
• https://github.com/LemonCraftRu/JndiRemover
• https://github.com/Liderbord/Log4j-Security
• https://github.com/LinkMJB/log4shell_scanner
• https://github.com/LiveOverflow/log4shell
• https://github.com/Log4s/log4s
• https://github.com/LoliKingdom/NukeJndiLookupFromLog4j
• https://github.com/LucasPDiniz/StudyRoom
• https://github.com/Luguisaca/log4shellcsiete
• https://github.com/LutziGoz/Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228
• https://github.com/LuxinfineTeam/JNDI-Log4j-Fixer
• https://github.com/M1ngGod/CVE-2021-44228-Log4j-lookup-Rce
• https://github.com/MLX15/log4j-scan
• https://github.com/Maelstromage/Log4jSherlock
• https://github.com/Malwar3Ninja/Exploitation-of-Log4j2-CVE-2021-44228
• https://github.com/MalwareTech/Log4jTools
• https://github.com/MannemSolutions/log4shelldetect
• https://github.com/MarceloLeite2604/log4j-vulnerability
• https://github.com/MarkusBordihn/BOs-Critical-Version-Forcer
• https://github.com/Mayfly277/docker_log4shell_java11
• https://github.com/MedKH1684/Log4j-Vulnerability-Exploitation
• https://github.com/MendelssohnTW/log4shell
• https://github.com/MeowRay/log4j2-client-protector
• https://github.com/MeterianHQ/log4j-vuln-coverage-check
• https://github.com/MiguelM001/vulescanjndilookup
• https://github.com/MikeLee343/log4shell-vulnerable-app
• https://github.com/MilovdZee/log4shell
• https://github.com/MkTech-0-8YT3/CVE-2021-44228
• https://github.com/Mormoroth/log4j-vulnerable-app-cve-2021-44228-terraform
• https://github.com/Mph-demo/Log4jApp
• https://github.com/Mr-Anonymous002/ThreatMapper
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/MrNossew/log4j
• https://github.com/N1ght420/Log4j
• https://github.com/NCSC-NL/log4shell
• https://github.com/NE137/log4j-scanner
• https://github.com/NO-MONKEY/log4j_use_in_sap
• https://github.com/NS-Sp4ce/Vm4J
• https://github.com/NUMde/compass-num-conformance-checker
• https://github.com/NagisaYumaa/Log4j_Exploit
• https://github.com/Nanitor/log4fix
• https://github.com/Narasimha1997/py4jshell
• https://github.com/NatteeSetobol/Log4JPOC
• https://github.com/Neo23x0/log4shell-detector
• https://github.com/Network-Armada-Support/TrafficScript
• https://github.com/NiftyBank/java-app
• https://github.com/Nikolas-Charalambidis/cve-2021-44228
• https://github.com/NorthwaveSecurity/log4jcheck
• https://github.com/Occamsec/log4j-checker
• https://github.com/Ode1esse/springboot-login-log4j2
• https://github.com/Offensive-Penetration-Security/OPSEC-Hall-of-fame
• https://github.com/OlafHaalstra/log4jcheck
• https://github.com/OopsieWoopsie/mc-log4j-patcher
• https://github.com/Open-ITOM/docker-mid-server
• https://github.com/OsiriX-Foundation/karnak
• https://github.com/OtherDevOpsGene/kubernetes-security-tools
• https://github.com/PAXSTORE/paxstore-openapi-java-sdk
• https://github.com/PaloAltoNetworks/prismacloud-cli
• https://github.com/Panyaprach/Proof-CVE-2021-44228
• https://github.com/Patecatl848/Log4jRamin
• https://github.com/PerishoJ/lg4shll
• https://github.com/PersianDevs/FeatherMC
• https://github.com/PersianDevs/FeatherMC-Outdated
• https://github.com/Phineas09/CVE-2021-44228
• https://github.com/Pluralsight-SORCERI/log4j-resources
• https://github.com/PoneyClairDeLune/LogJackFix
• https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
• https://github.com/Puliczek/awesome-list-of-secrets-in-environment-variables
• https://github.com/PushpenderIndia/Log4jScanner
• https://github.com/PwnC00re/Log4J_0day_RCE
• https://github.com/Qerim-iseni09/ByeLog4Shell
• https://github.com/Qualys/log4jscanwin
• https://github.com/R0Wi/elasticsearch-nextcloud-docker
• https://github.com/R3dAud1t0r/snaplabs
• https://github.com/Rafalini/log4jdemo
• https://github.com/RakhithJK/alexlynd-log4jpoc
• https://github.com/Ravid-CheckMarx/CVE-2021-44228-Apache-Log4j-Rce-main
• https://github.com/Realradioactive/log4j-radioactiveshell
• https://github.com/RedDrip7/Log4Shell_CVE-2021-44228_related_attacks_IOCs
• https://github.com/ReedOnly/log4shell-equinor
• https://github.com/RenYuH/log4j-lookups-vulnerability
• https://github.com/Retrospected/log4shell_selftest
• https://github.com/ReynerGonzalez/Security-Log4J-Tester
• https://github.com/Rk-000/Log4j_scan_Advance
• https://github.com/RrUZi/Awesome-CVE-2021-44228
• https://github.com/Ryan2065/Log4ShellDetection
• https://github.com/SantiagoPassafiume/Log4ShellScan
• https://github.com/Sennovate-Inc/GluuLog4jScanner
• https://github.com/Sh0ckFR/log4j-CVE-2021-44228-Public-IoCs
• https://github.com/ShaikhMohammedAbdullah/cloudera-scripts-for-log4j
• https://github.com/ShaneKingBlog/org.shaneking.demo.cve.y2021.s44228
• https://github.com/SimoneGianni/log4j-elasticbeanstalk-remove
• https://github.com/SindhuDemo/PerfTestDemo
• https://github.com/Staubgeborener/stars
• https://github.com/Stiloco/LOG4
• https://github.com/Sungjun-Ohh/sjtest-log4j
• https://github.com/SwinburneVietnam/log4j-scan
• https://github.com/System-CTL/Regexforlog4j-JNDI
• https://github.com/Taipo/pareto_security
• https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit
• https://github.com/Teagan-Wilson/PS-Log4J-finder
• https://github.com/TheArqsz/CVE-2021-44228-PoC
• https://github.com/TheInterception/Log4J-Simulation-Tool
• https://github.com/Threekiii/Awesome-Exploit
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Awesome-Redteam
• https://github.com/ToastNumber/log4shell
• https://github.com/Toolsec/log4j-scan
• https://github.com/ToxicEnvelope/XSYS-Log4J2Shell-Ex
• https://github.com/VK9D/Log4jHoneypot
• https://github.com/VNYui/CVE-2021-44228
• https://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j
• https://github.com/VinniMarcon/Log4j-Updater
• https://github.com/Vr00mm/log4j-article
• https://github.com/Vulnmachines/log4j-cve-2021-44228
• https://github.com/Vulnmachines/log4jshell_CVE-2021-44228
• https://github.com/WISeAgent/log4j2
• https://github.com/WatchGuard-Threat-Lab/log4shell-iocs
• https://github.com/Weilbyte/log4c
• https://github.com/Whoaa512/starred
• https://github.com/Willian-2-0-0-1/Log4j-Exploit-CVE-2021-44228
• https://github.com/Wise-Security-CSOC/Wise-Security-CSOC
• https://github.com/Woahd/log4j-urlscanner
• https://github.com/X1pe0/Log4J-Scan-Win
• https://github.com/XDragorteam/Log4j-automate-remote-code-execution-exe
• https://github.com/XmirrorSecurity/OpenSCA-cli
• https://github.com/XuCcc/ldapOOB
• https://github.com/Y0-kan/Log4jShell-Scan
• https://github.com/YoungBear/log4j2demo
• https://github.com/Zyglow/getcve
• https://github.com/a5tra/log4j-exploit-builder
• https://github.com/aajuvonen/log4stdin
• https://github.com/aalex954/Log4PowerShell
• https://github.com/ab0x90/CVE-2021-44228_PoC
• https://github.com/abulbasar/Log4ShellTestVulnerability
• https://github.com/adamtheapiguy/log4jshellPoC
• https://github.com/adelarsq/awesome-bugs
• https://github.com/adilsoybali/Log4j-RCE-Scanner
• https://github.com/adityakishore/log4j-jndi
• https://github.com/adriacabeza/personal-stars
• https://github.com/ahadzic7/diplomski2
• https://github.com/aholzel/log4j_splunk_querys
• https://github.com/alayanth/prodecon-log4shell
• https://github.com/alenazi90/log4j
• https://github.com/alex-ilgayev/log4shell-dockerized
• https://github.com/alexandre-lavoie/python-log4rce
• https://github.com/alexandreroman/cve-2021-44228-workaround-buildpack
• https://github.com/alexbakker/log4shell-tools
• https://github.com/alexpena5635/CVE-2021-44228_scanner-main-Modified-
• https://github.com/alexzeitgeist/starred
• https://github.com/allegroai/clearml-server
• https://github.com/alpacamybags118/log4j-cve-2021-44228-sample
• https://github.com/amTeaq/Log4j-Java-Payload
• https://github.com/andalik/log4j-filescan
• https://github.com/andi68/log4jExploit
• https://github.com/andrewmorganlatrobe/nse-log4shell
• https://github.com/andrewspearson/Log4Shell-Detection
• https://github.com/andrii-kovalenko-celonis/log4j-vulnerability-demo
• https://github.com/ankur-katiyar/log4j-docker
• https://github.com/ankur-katiyar/log4j-vunerable-server
• https://github.com/anonexploiter/lumberjack-writeup
• https://github.com/anthonyg-1/Log4jVulnScripts
• https://github.com/anuvindhs/how-to-check-patch-secure-log4j-CVE-2021-44228
• https://github.com/apoczekalewicz/log4shell
• https://github.com/archongum/cve-2021-44228-log4j
• https://github.com/arista-netdevops-community/cvp-tac-check-bugchecks
• https://github.com/arnaudluti/PS-CVE-2021-44228
• https://github.com/arszalaj/Log4shell
• https://github.com/asmith662/final-project
• https://github.com/asmith662/final_project
• https://github.com/asterinwl/elastic_search
• https://github.com/asyzdykov/cve-2021-44228-fix-jars
• https://github.com/at6ue/log4j-client-server
• https://github.com/atlassion/RS4LOGJ-CVE-2021-44228
• https://github.com/atnetws/TYPO3-solr-patcher
• https://github.com/atnetws/fail2ban-log4j
• https://github.com/atom-b/log4dap
• https://github.com/authomize/log4j-log4shell-affected
• https://github.com/avwolferen/Sitecore.Solr-log4j-mitigation
• https://github.com/awake1t/Awesome-hacking-tools
• https://github.com/aws-samples/kubernetes-log4j-cve-2021-44228-node-agent
• https://github.com/awsassets/CVE-2021-44229
• https://github.com/axelcurmi/log4shell-docker-lab
• https://github.com/axelmorningstar/log4j
• https://github.com/azabyo/log4j_vuln
• https://github.com/b-abderrahmane/CVE-2021-44228-playground
• https://github.com/b1n4ryj4n/awesome-stars
• https://github.com/b4zinga/Raphael
• https://github.com/back2root/log4shell-rex
• https://github.com/baobaovt/CodeReviewLab
• https://github.com/baph0m3th/log4j-scan
• https://github.com/bdmorin/ghstars
• https://github.com/ben-smash/l4j-info
• https://github.com/ben3636/suricata-rules
• https://github.com/bengisugun/Log4j-IOC
• https://github.com/bhprin/log4j-vul
• https://github.com/bi-zone/Log4j_Detector
• https://github.com/bigblackhat/oFx
• https://github.com/bigsizeme/Log4j-check
• https://github.com/binganao/Log4j2-RCE
• https://github.com/binkley/modern-java-practices
• https://github.com/bizzarecontacts/log4j-vendor-list
• https://github.com/blake-fm/vcenter-log4j
• https://github.com/bmoers/docker-mid-server
• https://github.com/bmoussaud/kpack-awesome-demo
• https://github.com/bollwarm/SecToolSet
• https://github.com/boundaryx/cloudrasp-log4j2
• https://github.com/bp0lr/log4jnode
• https://github.com/br1ght3n/CVEs
• https://github.com/bradfitz/jndi
• https://github.com/brechtsanders/find_log4j
• https://github.com/broadinstitute/trivy-cve-scan
• https://github.com/brootware/awesome-cyber-security-university
• https://github.com/bsigouin/log4shell-vulnerable-app
• https://github.com/bugbountyhunters/log4j-bypass
• https://github.com/bumheehan/cve-2021-44228-log4j-test
• https://github.com/bwolmarans/log4j-shell-poc
• https://github.com/byteboycn/CVE-2021-44228-Apache-Log4j-Rce
• https://github.com/c1apps/c1-log4jshell-poc
• https://github.com/cado-security/log4shell
• https://github.com/capdeyvila/AOC-log4jVul-test
• https://github.com/casagency/metasploit-CVE
• https://github.com/cbishop-elsevier/jenkins-log4shell-basecamp
• https://github.com/cbuschka/log4j2-rce-recap
• https://github.com/ccamel/awesome-ccamel
• https://github.com/cckuailong/Log4j_CVE-2021-45046
• https://github.com/cenote/jasperstarter
• https://github.com/census-instrumentation/opencensus-java
• https://github.com/ceyhuncamli/Log4j_Attacker_IPList
• https://github.com/chandru-gunasekaran/log4j-fix-CVE-2021-44228
• https://github.com/charrington-strib/ec2-log4j-scan
• https://github.com/chatpal/chatpal-search-standalone
• https://github.com/chilit-nl/log4shell-example
• https://github.com/chilliwebs/CVE-2021-44228_Example
• https://github.com/christian-taillon/log4shell-hunting
• https://github.com/christophetd/log4shell-vulnerable-app
• https://github.com/cisagov/Malcolm
• https://github.com/cisagov/log4j-affected-db
• https://github.com/cisagov/log4j-md-yml
• https://github.com/cisagov/log4j-scanner
• https://github.com/ckan/ckan-solr
• https://github.com/clabe45/shulkr
• https://github.com/claranet-cybersecurity/Log4Shell-Everywhere
• https://github.com/claranet/ansible-role-log4shell
• https://github.com/cloudera/cloudera-scripts-for-log4j
• https://github.com/codebling/wso2-docker-patches
• https://github.com/codemaker2015/log4j-vulnerability-finder
• https://github.com/codiobert/log4j-scanner
• https://github.com/corneacristian/Log4J-CVE-2021-44228-RCE
• https://github.com/corretto/hotpatch-for-apache-log4j2
• https://github.com/criteo/log4j-jndi-jar-detector
• https://github.com/crypt0jan/log4j-powershell-checker
• https://github.com/cryptoforcecommand/log4j-cve-2021-44228
• https://github.com/csduncan06/Log4j-command-generator
• https://github.com/curated-intel/Log4Shell-IOCs
• https://github.com/cyberqueen-meg/log4j-bypass
• https://github.com/cybersecsi/ansible-cyber-range-demo
• https://github.com/cybersecurityworks553/log4j-Detection
• https://github.com/cybersecurityworks553/log4j-shell-csw
• https://github.com/cyberxml/log4j-poc
• https://github.com/cyr-riv/rpi4-squid-elk
• https://github.com/cyware-labs/ukraine-russia-cyber-intelligence
• https://github.com/d4op/log4j-rce-fix-patched-jars
• https://github.com/daffychuy/Log4j-Exploit
• https://github.com/dandraka/Log4ShadeMitigationPoC
• https://github.com/danpem/Log4j-Vulnerable-App
• https://github.com/darkarnium/Log4j-CVE-Detect
• https://github.com/datadavev/test-44228
• https://github.com/davejwilson/azure-spark-pools-log4j
• https://github.com/dbgee/CVE-2021-44228
• https://github.com/dbzoo/log4j_scanner
• https://github.com/dcylabs/log4shell-vulnerability-tester
• https://github.com/defcon250/log4jScanner
• https://github.com/demilson/Log4Shell
• https://github.com/devops-vulcan/Log4j
• https://github.com/dhdiemer/sample-vulnerable-log4j-direct-app
• https://github.com/dhdiemer/sample-vulnerable-log4j-direct-lib
• https://github.com/dhdiemer/sample-vulnerable-log4j-indirect-app
• https://github.com/dhdiemer/udpated-vulnerable-log4j-direct-lib
• https://github.com/dhdiemer/updated-vulnerable-log4j-direct-app
• https://github.com/dhdiemer/updated-vulnerable-log4j-indirect-app
• https://github.com/didoatanasov/cve-2021-44228
• https://github.com/dileepdkumar/https-github.com-NCSC-NL-log4shell
• https://github.com/dileepdkumar/https-github.com-christophetd-log4shell-vulnerable-app
• https://github.com/dileepdkumar/https-github.com-cisagov-log4j-affected-dbv2
• https://github.com/dileepdkumar/https-github.com-mergebase-log4j-samples
• https://github.com/dinlakshmanan/RunTime-Vulnerability-Prevention---RHACS-Demo
• https://github.com/diva-e/talk-log4shell
• https://github.com/djt78/log4j_payload_downloader
• https://github.com/djungeldan/Log4Me
• https://github.com/dkd/elasticsearch
• https://github.com/dmitsuo/log4shell-war-fixer
• https://github.com/docker-solr/docker-solr
• https://github.com/doris0213/assignments
• https://github.com/dotPY-hax/log4py
• https://github.com/dpomnean/log4j_scanner_wrapper
• https://github.com/druminik/log4shell-poc
• https://github.com/dskeller/logpressowrapper
• https://github.com/dtact/divd-2021-00038--log4j-scanner
• https://github.com/ducducuc111/list-of-secrets-in-environment-variables
• https://github.com/dwisiswant0/look4jar
• https://github.com/dynatrace-ext/AppSecUtil
• https://github.com/dzygann/dzygann
• https://github.com/eclipse-archived/kuksa.integration
• https://github.com/eclipse-scout/scout.rt
• https://github.com/edsonjt81/log4-scanner
• https://github.com/edsonjt81/log4j-scan
• https://github.com/edsonjt81/nse-log4shell
• https://github.com/eeenvik1/scripts_for_YouTrack
• https://github.com/eelyvy/log4jshell-pdf
• https://github.com/eliezio/log4j-test
• https://github.com/emadshanab/Nuclei-Templates-Collection
• https://github.com/erickrr-bd/TekiumLog4jApp
• https://github.com/erikschippers/Log4J-Hyper-V-Script
• https://github.com/eventsentry/scripts
• https://github.com/expertflow/nginx-lua
• https://github.com/f0ng/log4j2burpscanner
• https://github.com/f5devcentral/f5-professional-services
• https://github.com/factoidforrest/homepage
• https://github.com/faisalfs10x/Log4j2-CVE-2021-44228-revshell
• https://github.com/fardeen-ahmed/Bug-bounty-Writeups
• https://github.com/fathzer/cve-reporter-core
• https://github.com/fbiville/neo4j-impersonation-demo
• https://github.com/felipe8398/ModSec-log4j2
• https://github.com/fireeye/CVE-2021-44228
• https://github.com/fireflyingup/log4j-poc
• https://github.com/flexera-public/sca-codeinsight-utilities-inventory-search
• https://github.com/fox-it/log4j-finder
• https://github.com/frontal1660/DSLF
• https://github.com/fscorrupt/awesome-stars
• https://github.com/ftp21/log4shell-vulnerable-app
• https://github.com/fullhunt/log4j-scan
• https://github.com/gassara-kys/log4shell-dns-query
• https://github.com/gauthamg/log4j2021_vul_test
• https://github.com/gbarretto/logout4shell-container
• https://github.com/gcmurphy/chk_log4j
• https://github.com/getsentry/sentry-java
• https://github.com/giannisalinetti/rhacs-log4shell-mitigation
• https://github.com/git-bom/bomsh
• https://github.com/giterlizzi/nmap-log4shell
• https://github.com/gitlab-de/log4j-resources
• https://github.com/gjrocks/TestLog4j
• https://github.com/gkhns/Unified-HTB-Tier-2-
• https://github.com/glaucomalagoli/service-now_mid_docker
• https://github.com/glshnu/rmm-yara4Log4j
• https://github.com/goofball222/unifi
• https://github.com/govgitty/log4shell-
• https://github.com/gramou/vuln-log4j2
• https://github.com/gredler/aegis4j
• https://github.com/grey0ut/Log4j-PoSH
• https://github.com/greymd/CVE-2021-44228
• https://github.com/grimch/log4j-CVE-2021-44228-workaround
• https://github.com/guardicode/CVE-2021-44228_IoCs
• https://github.com/guerzon/guerzon
• https://github.com/guerzon/log4shellpoc
• https://github.com/gumimin/dependency-check-sample
• https://github.com/gummigudm/pages-test
• https://github.com/gyaansastra/CVE-2021-44228
• https://github.com/gyaansastra/WAFBypass-Garurda
• https://github.com/hackinghippo/log4shell_ioc_ips
• https://github.com/halibobor/log4j2
• https://github.com/hashneo/log4j-wasm-filter
• https://github.com/helsecert/CVE-2021-44228
• https://github.com/hex0wn/learn-java-bug
• https://github.com/hichamelaaouad/Log4j
• https://github.com/hillu/local-log4j-vuln-scanner
• https://github.com/hiteop4q0/1-CVE
• https://github.com/hiteop4q0/master
• https://github.com/hktalent/TOP
• https://github.com/hndanesh/log4shell
• https://github.com/honeynet/log4shell-data
• https://github.com/honypot/CVE-2021-44228
• https://github.com/honypot/CVE-2021-44228-vuln-app
• https://github.com/hoppymalt/log4j-poc
• https://github.com/hotpotcookie/log4shell-white-box
• https://github.com/hozyx/log4shell
• https://github.com/hsparmar1/semgrep-log4j-vul-demo
• https://github.com/hupe1980/scan4log4shell
• https://github.com/hyperkrypt/log4shell
• https://github.com/hypertrace/hypertrace
• https://github.com/hyperupcall/stars
• https://github.com/iHDeveloper/SpigotLog4jPatch
• https://github.com/idmengineering/handy_stuff
• https://github.com/ihgalis/log4shell
• https://github.com/imTigger/webapp-hardware-bridge
• https://github.com/immunityinc/Log4j-JNDIServer
• https://github.com/inettgmbh/checkmk-log4j-scanner
• https://github.com/infiniroot/nginx-mitigate-log4shell
• https://github.com/initconf/log4j
• https://github.com/insignit/cve-informatie
• https://github.com/integralads/dependency-deep-scan-utilities
• https://github.com/intel-xeon/CVE-2021-44228---detection-with-PowerShell
• https://github.com/irgoncalves/f5-waf-enforce-sig-CVE-2021-44228
• https://github.com/irrer/DICOMClient
• https://github.com/isuruwa/Log4j
• https://github.com/izzyacademy/log4shell-mitigation
• https://github.com/j3kz/CVE-2021-44228-PoC
• https://github.com/jacobtread/L4J-Vuln-Patch
• https://github.com/jacobwarren/waratek-log4j-poc
• https://github.com/jacobxr/log4shell-vulnerable-app
• https://github.com/jaehnri/CVE-2021-44228
• https://github.com/jahidul-arafat/log4j-vulnerability-simulation
• https://github.com/jamesbrunke/AttendanceProject
• https://github.com/jan-muhammad-zaidi/Log4j-CVE-2021-44228
• https://github.com/jas502n/Log4j2-CVE-2021-44228
• https://github.com/jaspervanderhoek/MicroflowScheduledEventManager
• https://github.com/jaygooby/jaygooby
• https://github.com/jbautistamartin/Log4ShellEjemplo
• https://github.com/jeffbryner/log4j-docker-vaccine
• https://github.com/jeffli1024/log4j-rce-test
• https://github.com/jenriquezv/OSCP-Cheat-Sheets-AD
• https://github.com/jeremyrsellars/CVE-2021-44228_scanner
• https://github.com/jfrog/jfrog-cli-plugins-reg
• https://github.com/jfrog/log4j-tools
• https://github.com/jhinz1/log4shell
• https://github.com/jlandowner/springboot-jib
• https://github.com/jnyilas/log4j-finder
• https://github.com/jrocia/Search-log4Jvuln-AppScanSTD
• https://github.com/js-on/jndiRep
• https://github.com/jsnv-dev/yet_another_log4j_POC_standalone
• https://github.com/juancarlosme/java1
• https://github.com/julian911015/Log4j-Scanner-Exploit
• https://github.com/justakazh/Log4j-CVE-2021-44228
• https://github.com/justb4/docker-jmeter
• https://github.com/jvasallo/gcr-cve-scanner
• https://github.com/k4u5h41/log4j
• https://github.com/kaganoglu/Log4j
• https://github.com/kaipee/log4shell-detector-playbook
• https://github.com/kal1gh0st/MyLog4Shell
• https://github.com/kali-dass/CVE-2021-44228-log4Shell
• https://github.com/kanitan/log4j2-web-vulnerable
• https://github.com/kannthu/CVE-2021-44228-Apache-Log4j-Rce
• https://github.com/karanratra/log4jshell
• https://github.com/kbooth-insight/log4shell-walkthrough-example
• https://github.com/kdgregory/log4j-aws-appenders
• https://github.com/kek-Sec/log4j-scanner-CVE-2021-44228
• https://github.com/kenlavbah/log4jnotes
• https://github.com/kevinwallimann/log4shell-vulnerable-shaded-app
• https://github.com/kevinwallimann/log4shell-vulnerable-spark-app
• https://github.com/kimobu/cve-2021-44228
• https://github.com/kkyehit/log4j_CVE-2021-44228
• https://github.com/kni9ht/LOg4j-poc
• https://github.com/korteke/log4shell-demo
• https://github.com/kossatzd/log4j-CVE-2021-44228-test
• https://github.com/kozmer/log4j-shell-poc
• https://github.com/krah034/oss-vulnerability-check-demo
• https://github.com/kubearmor/log4j-CVE-2021-44228
• https://github.com/kuramochi-coder/terraform-log4shell
• https://github.com/kuro-kokko/202203_sequre
• https://github.com/kvbutler/solr8-rehl8.5-fips-sip
• https://github.com/kyoshiaki/docker-compose-wordpress
• https://github.com/lamyongxian/crmmvc
• https://github.com/layou233/Tritium-backup
• https://github.com/leetxyz/CVE-2021-44228-Advisories
• https://github.com/lemon-mint/stars
• https://github.com/leonjza/log4jpwn
• https://github.com/lethehoa/Racoon_template_guide
• https://github.com/lfama/log4j_checker
• https://github.com/lgtux/find_log4j
• https://github.com/lhotari/log4shell-mitigation-tester
• https://github.com/lhotari/pulsar-docker-images-patch-CVE-2021-44228
• https://github.com/li0122/li0122
• https://github.com/lichtwellenreiter/jndisearch
• https://github.com/lil5534/aqa
• https://github.com/linhtd99/log4sas
• https://github.com/linuxserver/davos
• https://github.com/linuxserver/docker-fleet
• https://github.com/linuxserver/docker-unifi-controller
• https://github.com/localstack/localstack-java-utils
• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/lohanichaten/log4j-cve-2021-44228
• https://github.com/lonecloud/CVE-2021-44228-Apache-Log4j
• https://github.com/lordtmk/lord4j
• https://github.com/lov3r/cve-2021-44228-log4j-exploits
• https://github.com/lucab85/ansible-role-log4shell
• https://github.com/lucab85/log4j-cve-2021-44228
• https://github.com/lukepasek/log4jjndilookupremove
• https://github.com/lukibahr/unifi-controller-helm-chart
• https://github.com/lumalav/CAP6135_FinalProject
• https://github.com/lyuheng13/log4shell
• https://github.com/m0rath/detect-log4j-exploitable
• https://github.com/mad1c/log4jchecker
• https://github.com/madCdan/JndiLookup
• https://github.com/madhusudhankonda/log4j-vulnerability
• https://github.com/maheshboya6789/microsoft-ApplicationInsights-Java
• https://github.com/mandiant/heyserial
• https://github.com/manishkanyal/log4j-scanner
• https://github.com/manuel-alvarez-alvarez/log4j-cve-2021-44228
• https://github.com/many-fac3d-g0d/apache-tomcat-log4j
• https://github.com/marcourbano/Log4Shell_PoC
• https://github.com/mark-5-9/mark59
• https://github.com/mark-5-9/mark59-wip
• https://github.com/mark-5-9/mark59-zz-temp
• https://github.com/marklindsey11/-CVE-2021-44228_scanner-Applications-that-are-vulnerable-to-the-log4j-CVE-2021-44228-https-nvd.
• https://github.com/marklindsey11/gh-repo-clone-marklindsey11--CVE-2021-44228_scanner-Applications-that-are-vulnerable-to-the-log4j-CV
• https://github.com/marksowell/my-stars
• https://github.com/marksowell/stars
• https://github.com/markuman/aws-log4j-mitigations
• https://github.com/maxant/log4j2-CVE-2021-44228
• https://github.com/maxgfr/awesome-stars
• https://github.com/maximofernandezriera/CVE-2021-44228
• https://github.com/mazhar-hassan/log4j-vulnerability
• https://github.com/mbechler/marshalsec
• https://github.com/mcen1/log4j_scanner
• https://github.com/mdonila/log4j
• https://github.com/mergebase/csv-compare
• https://github.com/mergebase/log4j-detector
• https://github.com/mergebase/log4j-samples
• https://github.com/metabrainz/mb-solr
• https://github.com/metodidavidovic/log4j-quick-scan
• https://github.com/mgreau/log4shell-cpatch
• https://github.com/mguessan/davmail
• https://github.com/micha3lcve/CVE-2021-44228-Mass-RCE
• https://github.com/micha3lcve/LOG4J-mass-rce-CVE-2021-44228
• https://github.com/michaelsanford/Log4Shell-Honeypot
• https://github.com/microsoft/ApplicationInsights-Java
• https://github.com/milindvishnoi/Log4J-Vulnerability
• https://github.com/milosveljkovic/loguccino
• https://github.com/minhnq22/log4shell_exploit
• https://github.com/mirac7/codegraph
• https://github.com/mitiga/log4shell-cloud-scanner
• https://github.com/mitiga/log4shell-everything
• https://github.com/mkbyme/docker-jmeter
• https://github.com/mklinkj/log4j2-test
• https://github.com/mn-io/log4j-spring-vuln-poc
• https://github.com/momos1337/Log4j-RCE
• https://github.com/morphuslabs/get-log4j-exploit-payload
• https://github.com/moshuum/tf-log4j-aws-poc
• https://github.com/motikan2010/RASP-CVE-2021-44228
• https://github.com/mr-r3b00t/CVE-2021-44228
• https://github.com/mr-vill4in/log4j-fuzzer
• https://github.com/mrjameshamilton/log4shell-detector
• https://github.com/mschmnet/Log4Shell-demo
• https://github.com/msoftch/log4j-detector
• https://github.com/mss/log4shell-hotfix-side-effect
• https://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes
• https://github.com/mufeedvh/log4jail
• https://github.com/municipalparkingservices/CVE-2021-44228-Scanner
• https://github.com/muratyokus/Log4j-IOCs
• https://github.com/muratyokus/Turkey-discovery-and-exploitation-IOCs
• https://github.com/mute1997/CVE-2021-44228-research
• https://github.com/mypa/solr
• https://github.com/myyxl/cve-2021-44228-minecraft-poc
• https://github.com/mzlogin/CVE-2021-44228-Demo
• https://github.com/n1f2c3/log4jScan_demo
• https://github.com/n1g3ld0uglas/EuroAKSWorkshopCC
• https://github.com/nagten/JndiLookupRemoval
• https://github.com/naryal2580/jandis
• https://github.com/nccgroup/log4j-jndi-be-gone
• https://github.com/nddipiazza/fusion-log4shell-vulnerability-patch
• https://github.com/nedenwalker/spring-boot-app-using-gradle
• https://github.com/nedenwalker/spring-boot-app-with-log4j-vuln
• https://github.com/neelthakor21/CVE_Scraper
• https://github.com/netarchivesuite/solrwayback
• https://github.com/netricsag/log4j-scanner
• https://github.com/newrelic-experimental/nr-find-log4j
• https://github.com/newrelic/java-log-extensions
• https://github.com/nickdtong/VulnLogApp
• https://github.com/nickdtong/vulnlog4jApp2
• https://github.com/nil-malh/JNDI-Exploit
• https://github.com/nilsujma/log4j-k8s
• https://github.com/ninadgawad/Log4j2
• https://github.com/nix-xin/vuln4japi
• https://github.com/nkoneko/VictimApp
• https://github.com/nlmaca/Wowza_Installers
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/noscripter/log4j-shell-poc
• https://github.com/nroduit/Weasis
• https://github.com/nu11secur1ty/CVE-2021-44228-VULN-APP
• https://github.com/nu11secur1ty/CVE-mitre
• https://github.com/nu11secur1ty/CVE-nu11secur1ty
• https://github.com/numanturle/Log4jNuclei
• https://github.com/obscuritylabs/log4shell-poc-lab
• https://github.com/ochrance-cz/web
• https://github.com/okorach/log4shell-detect
• https://github.com/open-source-agenda/new-open-source-projects
• https://github.com/openx-org/BLEN
• https://github.com/ossie-git/log4shell_sentinel
• https://github.com/otaviokr/log4j-2021-vulnerability-study
• https://github.com/ox-eye/Ox4Shell
• https://github.com/p1ay8y3ar/cve_monitor
• https://github.com/p3dr16k/log4j-1.2.15-mod
• https://github.com/p3n7a90n/Log4j-RCE-POC
• https://github.com/paladincyber/log4jprotector
• https://github.com/palantir/log4j-sniffer
• https://github.com/palominoinc/cve-2021-44228-log4j-mitigation
• https://github.com/panopset/oregon
• https://github.com/patriklindstrom-schibsted/gh-guinea-pig-test
• https://github.com/paulvkitor/log4shellwithlog4j2_13_3
• https://github.com/paulvkitor/log4shellwithlog4j2_15
• https://github.com/pedrohavay/exploit-CVE-2021-44228
• https://github.com/pen4uin/vulnerability-research
• https://github.com/pentesterland/Log4Shell
• https://github.com/perryflynn/find-log4j
• https://github.com/petebuffon/launcher-ot-minecraft
• https://github.com/phax/ph-oton
• https://github.com/phax/phoss-directory
• https://github.com/phenrique2104/cve-score
• https://github.com/phiroict/pub_log4j2_fix
• https://github.com/phoswald/sample-ldap-exploit
• https://github.com/pmembrey/log4j-portscan
• https://github.com/pmontesd/Log4PowerShell
• https://github.com/pmontesd/log4j-cve-2021-44228
• https://github.com/pnf/jndijilt
• https://github.com/pravin-pp/log4j2-CVE-2021-44228
• https://github.com/prax78/Log4ScannerWrapper
• https://github.com/promregator/promregator
• https://github.com/psychose-club/Saturn
• https://github.com/puckiestyle/Log4jUnifi
• https://github.com/puckiestyle/marshalsec
• https://github.com/puzzlepeaches/Log4jCenter
• https://github.com/puzzlepeaches/Log4jHorizon
• https://github.com/puzzlepeaches/Log4jUnifi
• https://github.com/pvnovarese/2022-02-enterprise-demo
• https://github.com/pvnovarese/2022-04-enterprise-demo
• https://github.com/pvnovarese/2022-04-suse-demo
• https://github.com/pvnovarese/2022-06-enterprise-demo
• https://github.com/qingtengyun/cve-2021-44228-qingteng-online-patch
• https://github.com/qingtengyun/cve-2021-44228-qingteng-patch
• https://github.com/quoll/mulgara
• https://github.com/r00thunter/Log4Shell
• https://github.com/r00thunter/Log4Shell-Scanner
• https://github.com/r3kind1e/Log4Shell-obfuscated-payloads-generator
• https://github.com/ra890927/Log4Shell-CVE-2121-44228-Demo
• https://github.com/racke/ansible-role-solr
• https://github.com/racoon-rac/CVE-2021-44228
• https://github.com/radiusmethod/awesome-gists
• https://github.com/rakutentech/jndi-ldap-test-server
• https://github.com/rapbit0/log4shell
• https://github.com/ravro-ir/log4shell-looker
• https://github.com/razz0r/CVE-2021-44228-Mass-RCE
• https://github.com/rdar-lab/cve-impact-check
• https://github.com/recanavar/vuln_spring_log4j2
• https://github.com/redhuntlabs/Log4JHunt
• https://github.com/rejupillai/log4j2-hack-springboot
• https://github.com/retr0-13/Log4Pot
• https://github.com/retr0-13/LogMePwn
• https://github.com/retr0-13/awesome-list-of-secrets-in-environment-variables
• https://github.com/retr0-13/log4j-bypass-words
• https://github.com/retr0-13/log4j-scan
• https://github.com/retr0-13/log4jshell-pdf
• https://github.com/retr0-13/log4shell
• https://github.com/retr0-13/nse-log4shell
• https://github.com/rf-peixoto/log4j_scan-exploit
• https://github.com/rgl/log4j-log4shell-playground
• https://github.com/righettod/log4shell-analysis
• https://github.com/rinormaloku/devopscon-berlin
• https://github.com/rizkimaung/SoftwareCompositionsAnalysis-test
• https://github.com/robinp77/Log4Shell
• https://github.com/robrankin/cve-2021-44228-waf-tests
• https://github.com/rod4n4m1/hashi-vault-js
• https://github.com/rohankumardubey/CVE-2021-44228_scanner
• https://github.com/rohankumardubey/log4j-tools
• https://github.com/romeolibm/DBWorkloadProcessor
• https://github.com/roswellit/CVE-2021-44228
• https://github.com/roticagas/CVE-2021-44228-Demo
• https://github.com/roxas-tan/CVE-2021-44228
• https://github.com/rtkwlf/wolf-tools
• https://github.com/rubo77/log4j_checker_beta
• https://github.com/rv4l3r3/log4v-vuln-check
• https://github.com/s-retlaw/l4s_poc
• https://github.com/s-retlaw/l4srs
• https://github.com/s-ribeiro/Modsecurity-Rules
• https://github.com/safe6Sec/CodeqlNote
• https://github.com/saharNooby/log4j-vulnerability-patcher-agent
• https://github.com/samq-ghdemo/christophetd-log4shell-vulnerable-app
• https://github.com/samq-research/christophetd-log4shell-vulnerable-app
• https://github.com/sandarenu/log4j2-issue-check
• https://github.com/sassoftware/loguccino
• https://github.com/scheibling/py-log4shellscanner
• https://github.com/schnatterer/smeagol-galore
• https://github.com/scholzj/scholzj
• https://github.com/scitotec/log4j-recognizer
• https://github.com/scstanton/log4j-hashes
• https://github.com/sdogancesur/log4j_github_repository
• https://github.com/sebiboga/jmeter-fix-cve-2021-44228-windows
• https://github.com/sebw/ansible-acs-policy-creation
• https://github.com/seculayer/Log4j-Vulnerability
• https://github.com/secureworks/log4j-analysis
• https://github.com/semelnyk/CVE-2021-44228-ScannersListFromRF
• https://github.com/sgtest/sample-vulnerable-log4j-direct-app
• https://github.com/sgtest/sample-vulnerable-log4j-direct-lib
• https://github.com/sgtest/sample-vulnerable-log4j-indirect-app
• https://github.com/shamo0/CVE-2021-44228
• https://github.com/shawnparslow/Log4jPowerShellScanner
• https://github.com/shivakumarjayaraman/log4jvulnerability-CVE-2021-44228
• https://github.com/shoxxdj/log4shellExploit
• https://github.com/shupingfu/collections
• https://github.com/sicherha/log4shell
• https://github.com/simonis/Log4jPatch
• https://github.com/sinakeshmiri/log4jScan
• https://github.com/slrbl/log4j-vulnerability-check
• https://github.com/snapattack/damn-vulnerable-log4j-app
• https://github.com/snatalius/log4j2-CVE-2021-44228-poc-local
• https://github.com/snoopysecurity/awesome-burp-extensions
• https://github.com/snow0715/log4j-Scan-Burpsuite
• https://github.com/snyk-labs/awesome-log4shell
• https://github.com/solitarysp/Log4j-CVE-2021-44228
• https://github.com/sonicgdm/loadtests-jmeter
• https://github.com/soosmile/POC
• https://github.com/soumitrak/javaagent-log4j-jndilookup
• https://github.com/sourcegraph/log4j-cve-code-search-resources
• https://github.com/sparkydz/log4j-RCE-Exploitation-Detection
• https://github.com/spasam/log4j2-exploit
• https://github.com/srhercules/log4j_mass_scanner
• https://github.com/sschakraborty/SecurityPOC
• https://github.com/ssl/scan4log4j
• https://github.com/ssstonebraker/log4j-scan-turbo
• https://github.com/standb/CVE-2021-44228-poc
• https://github.com/stefmolin/Holiday-Hack-Challenge-2021
• https://github.com/steve727/Log4Shell
• https://github.com/strawhatasif/log4j-test
• https://github.com/stripe/log4j-remediation-tools
• https://github.com/stripesoc/blocklists
• https://github.com/stripesoc/detections
• https://github.com/sud0x00/log4j-CVE-2021-44228
• https://github.com/sudesh0sudesh/Log4jDemo_nonvuln
• https://github.com/sudesh0sudesh/log4jDemo_vulnerable
• https://github.com/sudo6/l4shunter
• https://github.com/suky57/logj4-cvi-fix-unix
• https://github.com/suniastar/scan-log4shell
• https://github.com/sunnyvale-it/CVE-2021-44228-PoC
• https://github.com/superfish9/pt
• https://github.com/suuhm/log4shell4shell
• https://github.com/sysadmin0815/Fix-Log4j-PowershellScript
• https://github.com/taielab/awesome-hacking-lists
• https://github.com/taise-hub/log4j-poc
• https://github.com/takito1812/log4j-detect
• https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce
• https://github.com/tanpenggood/learning-java-log
• https://github.com/tarja1/log4shell_fix
• https://github.com/tasooshi/horrors-log4shell
• https://github.com/taurusxin/CVE-2021-44228
• https://github.com/tcoliver/IBM-SPSS-log4j-fixes
• https://github.com/tejas-nagchandi/CVE-2021-45046
• https://github.com/tgutmann87/Log4J_Version_Checker
• https://github.com/thecyberneh/Log4j-RCE-Exploiter
• https://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832
• https://github.com/themorajr/log4shell-poc
• https://github.com/theonlyguz/log4j-check
• https://github.com/thl-cmk/CVE-log4j-check_mk-plugin
• https://github.com/thomaspatzke/Log4Pot
• https://github.com/threatmonit/Log4j-IOCs
• https://github.com/tica506/Siem-queries-for-CVE-2021-44228
• https://github.com/timkanbur/Log4j_Exploit_Paper
• https://github.com/tkterris/log4shell-lab
• https://github.com/tmax-cloud/install-EFK
• https://github.com/tobiasoed/log4j-CVE-2021-44228
• https://github.com/toramanemre/apache-solr-log4j-CVE-2021-44228
• https://github.com/toramanemre/log4j-rce-detect-waf-bypass
• https://github.com/tothi/log4shell-vulnerable-app
• https://github.com/trevalkov/log4j2-prosecutor
• https://github.com/trhung26620/L4JScanner
• https://github.com/trickyearlobe/CVE_2021_44228_Check
• https://github.com/trickyearlobe/inspec-log4j
• https://github.com/trickyearlobe/patch_log4j
• https://github.com/tsaarni/container-image-patcher
• https://github.com/tslenter/RSX-RSC
• https://github.com/ttgithg/rm_poc_log4shell
• https://github.com/turbomaster95/log4j-poc-shell
• https://github.com/tutttuwi/JNDI-Injection-Target-App
• https://github.com/tuyenee/Log4shell
• https://github.com/twseptian/spring-boot-log4j-cve-2021-44228-docker-lab
• https://github.com/typelevel/log4cats
• https://github.com/tzwlhack/log4j-scan
• https://github.com/tzwlhack/log4j-scan1
• https://github.com/ubitech/cve-2021-44228-rce-poc
• https://github.com/uint0/cve-2021-44228--spring-hibernate
• https://github.com/uint0/cve-2021-44228-helpers
• https://github.com/uli-heller/spring-boot-logback
• https://github.com/unlimitedsola/log4j2-rce-poc
• https://github.com/urholaukkarinen/docker-log4shell
• https://github.com/urossss/log4j-poc
• https://github.com/valtix-security/Log4j-Indicators-of-Compromise
• https://github.com/vectra-ai-research/log4j-aws-sandbox
• https://github.com/vendia/blog
• https://github.com/vidrez/log4j-deserialization-rce-POC
• https://github.com/vidrez/log4j-rce-poc
• https://github.com/vidrez/test-log4shell
• https://github.com/vorburger/Learning-Log4j2
• https://github.com/vorburger/Log4j_CVE-2021-44228
• https://github.com/vsegdacocacola/Log4jExploitPayloadExtractor
• https://github.com/wajda/log4shell-test-exploit
• https://github.com/walid-belhadj/Log4J-Shell
• https://github.com/wanetty/wanetty.github.io
• https://github.com/warriordog/little-log-scan
• https://github.com/warroyo/tkgi-log4shell-release
• https://github.com/watson-developer-cloud/assistant-with-discovery
• https://github.com/wavefrontHQ/wavefront-proxy
• https://github.com/wcoreiron/Sentinel_Analtic_Rules
• https://github.com/webraybtl/log4j-snort
• https://github.com/wh1tenoise/log4j-scanner
• https://github.com/whalehub/awesome-stars
• https://github.com/wheez-y/CVE-2021-44228-kusto
• https://github.com/whitel/minecraft-ic2
• https://github.com/whitesource-ps/ws-bulk-report-generator
• https://github.com/whitesource/log4j-detect-distribution
• https://github.com/whitesquirrell/C0deVari4nt
• https://github.com/winnpixie/log4noshell
• https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
• https://github.com/witblack/G3nius-Tools-Sploit
• https://github.com/wklaebe/HelloLog4J
• https://github.com/wortell/log4j
• https://github.com/x8lh/log4jScanLite
• https://github.com/xiefeihong/jndi-utils
• https://github.com/xinyuz/xyz-log4jtesting
• https://github.com/xnorkl/log4shelper
• https://github.com/xsultan/log4jshield
• https://github.com/y-security/yLog4j
• https://github.com/y35uishere/Log4j2-CVE-2021-44228
• https://github.com/yahoo/check-log4j
• https://github.com/yanggfann/java-slf4j-logging-example
• https://github.com/yanghaoi/CVE-2021-44228_Log4Shell
• https://github.com/yannart/log4shell-scanner-rs
• https://github.com/yatoub/Log4jVulnChecker
• https://github.com/ycdxsb/Log4Shell-CVE-2021-44228-ENV
• https://github.com/yesspider-hacker/log4j-payload-generator
• https://github.com/yuuki1967/CVE-2021-44228-Apache-Log4j-Rce
• https://github.com/zG0Dlike/Minecraft-RAT
• https://github.com/zane00/CVE-2021-44228
• https://github.com/zaneoblaneo/zLog4ShellExploit
• https://github.com/zaroza/TestRepository
• https://github.com/zeddee-spam/log4shell-vulnerable-app
• https://github.com/zenire/log4j-vulnerable-software
• https://github.com/zeroonesa/ctf_log4jshell
• https://github.com/zhangxvx/Log4j-Rec-CVE-2021-44228
• https://github.com/zhangyoufu/log4j2-without-jndi
• https://github.com/zhzyker/logmap
• https://github.com/zjx/CVE-2021-44228
• https://github.com/zlatinb/mucats
• https://github.com/zlepper/CVE-2021-44228-Test-Server
• https://github.com/zsolt-halo/Log4J-Log4Shell-CVE-2021-44228-Spring-Boot-Test-Service
• https://github.com/zy9ard3/Log4J
• https://github.com/zzzz0317/log4j2-vulnerable-spring-app
• https://github.com/Grupo-Kapa-7/CVE-2021-44228-Log4j-PoC-RCE
• https://github.com/lhotari/pulsar-docker-images-patch-CVE-2021-44228
• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832
• https://github.com/CERTCC/CVE-2021-44228_scanner
• https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
• https://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j
• https://github.com/helsecert/CVE-2021-44228
• https://github.com/lhotari/pulsar-docker-images-patch-CVE-2021-44228
• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/rohankumardubey/CVE-2021-44228_scanner
• https://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832
• https://github.com/zane00/CVE-2021-44228
• https://github.com/BabooPan/Log4Shell-CVE-2021-44228-Demo
• https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
• https://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j
• https://github.com/helsecert/CVE-2021-44228
• https://github.com/lhotari/pulsar-docker-images-patch-CVE-2021-44228
• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/thedevappsecguy/Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832
• https://github.com/zane00/CVE-2021-44228
• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/logpresso/CVE-2021-44228-Scanner
• https://github.com/logpresso/CVE-2021-44228-Scanner