+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: log4shell injections (/showthread.php?tid=6185928)
log4shell injections - SIM-5111991 - Dec 21, 2021
does anyone here know how to hack the latest log4j vulnerability and what do we need to use for this. for example using vuln web app, gidrha,...etc
RE: log4shell injections - SIM-4697943 - Dec 21, 2021
(Dec 21, 2021 08:57 PM)SIM-5111991 Wrote: does anyone here know how to hack the latest log4j vulnerability and what do we need to use for this. for example using vuln web app, gidrha,...etc
You're kinda late on the scene, as a lot of Java users have already updated to the latest version(s) which isn't really affected by log4j
Also, if you're looking to do this in Minecraft/Java-Based Games, I advise you do it to servers that seemed to have no update whatsoever since the vulnerability was discovered to have the highest chance of success, which is low nowadays.
This is my take on it of course, which is very likely wrong to some extent in one aspect or another, mainly because I didn't pay attention to it myself.
(Dec 21, 2021 08:57 PM)SIM-5111991 Wrote: does anyone here know how to hack the latest log4j vulnerability and what do we need to use for this. for example using vuln web app, gidrha,...etc
Also, the tools are out there already, go get it yourself. As for customary things that are specific to a server/website/application, then I advise you have someone code it for you (Paid), or do it yourself.
RE: log4shell injections - mpkwgwbgates - Dec 23, 2021
(Dec 21, 2021 10:31 PM)Shawn1892 Wrote: You're kinda late on the scene, as a lot of Java users have already updated to the latest version(s) which isn't really affected by log4j
Also, if you're looking to do this in Minecraft/Java-Based Games, I advise you do it to servers that seemed to have no update whatsoever since the vulnerability was discovered to have the highest chance of success, which is low nowadays.
This is my take on it of course, which is very likely wrong to some extent in one aspect or another, mainly because I didn't pay attention to it myself.
Also, the tools are out there already, go get it yourself. As for customary things that are specific to a server/website/application, then I advise you have someone code it for you (Paid), or do it yourself.
Mind if i ask what are some of the keyword names of these tools ?
Thanks