16 ms·
The two examples showcase the potential of the RCE. The JNDI endpoint answers with a serialized java class: a) https://github.com/Cybereason/Logout4Shell https
by hrpnk 5y ago
The two examples showcase the potential of the RCE. The JNDI endpoint answers with a serialized java class:
a) https://github.com/Cybereason/Logout4Shell https://github.com/Cybereason/Logout4Shell where a class is self-healing the log4j vulnerability by reconfiguring it
b) https://twitter.com/marcioalm/status/1470361495405875200 https://twitter.com/marcioalm/status/1470361495405875200 where the payload is opening an application (calculator) on the host system