Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

log4shell injections

does anyone here know how to hack the latest log4j vulnerability and what do we need to use for this. for example using vuln web app, gidrha,...etc
(Dec 21, 2021 08:57 PM)SIM-5111991 Wrote:  does anyone here know how to hack the latest log4j vulnerability and what do we need to use for this. for example using vuln web app, gidrha,...etc

You're kinda late on the scene, as a lot of Java users have already updated to the latest version(s) which isn't really affected by log4j

Also, if you're looking to do this in Minecraft/Java-Based Games, I advise you do it to servers that seemed to have no update whatsoever since the vulnerability was discovered to have the highest chance of success, which is low nowadays.

This is my take on it of course, which is very likely wrong to some extent in one aspect or another, mainly because I didn't pay attention to it myself.


(Dec 21, 2021 08:57 PM)SIM-5111991 Wrote:  does anyone here know how to hack the latest log4j vulnerability and what do we need to use for this. for example using vuln web app, gidrha,...etc

Also, the tools are out there already, go get it yourself. As for customary things that are specific to a server/website/application, then I advise you have someone code it for you (Paid), or do it yourself.
(Dec 21, 2021 10:31 PM)SIM-4697943 Wrote:  You're kinda late on the scene, as a lot of Java users have already updated to the latest version(s) which isn't really affected by log4j

Also, if you're looking to do this in Minecraft/Java-Based Games, I advise you do it to servers that seemed to have no update whatsoever since the vulnerability was discovered to have the highest chance of success, which is low nowadays.

This is my take on it of course, which is very likely wrong to some extent in one aspect or another, mainly because I didn't pay attention to it myself.



Also, the tools are out there already, go get it yourself. As for customary things that are specific to a server/website/application, then I advise you have someone code it for you (Paid), or do it yourself.

Mind if i ask what are some of the keyword names of these tools ?

Thanks


Possibly Related Threads...
Thread / Author Replies Views Last Post
by LightOrithmDec 4, 2020 04:51 AM 1 98 Dec 4, 2020 04:51 AM
Last Post: cakenpiez
by AriesfangzDec 2, 2017 02:12 PM 7 210 Dec 2, 2017 02:12 PM
Last Post: CyberStrike
by Bronze5Jul 23, 2017 07:34 PM 3 123 Jul 23, 2017 07:34 PM
Last Post: Bronze5