Log4J Exploit Demo

แชร์
ฝัง
  • เผยแพร่เมื่อ 19 ธ.ค. 2024

ความคิดเห็น • 67

  • @Michael-im5mq
    @Michael-im5mq ปีที่แล้ว

    This is very cool and I love your avatar. Reminds me of F-society in Mr Robot. Subscribed

    • @Roelox
      @Roelox  ปีที่แล้ว +1

      Thank you! And yes haha my avatar is inspired by F-society from Mr Robot.

  • @georgedanicico6641
    @georgedanicico6641 8 หลายเดือนก่อน

    I am trying to make a demo for this vulnerability for a homework, and I tried to make the same repo work, but I couldn't on my mac m1. It prints the message that says "redirecting to http...". The only difference is that I started the vulnerable app locally, since there is no alternative for docker network host on mac. Do you know what could be the issue?

    • @Roelox
      @Roelox  8 หลายเดือนก่อน

      Sorry for the super late response, add me on discord, my name on there is roelox

  • @muhammedithban9930
    @muhammedithban9930 2 ปีที่แล้ว +1

    Hi Roel, I'm encountering this "OSError: [Errno 8] Exec format error" after this command 'sudo python3 poc.py'. Can you please help me?

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      Did you modify the content in poc.py?

    • @scorcher7297
      @scorcher7297 2 ปีที่แล้ว

      @@Roelox no changes have been made to poc.py file, I am also getting same error

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      @@scorcher7297 Can you send me screenshot on discord, Roel#6931

  • @karthikbt7239
    @karthikbt7239 2 ปีที่แล้ว

    I am getting an error at @3:00 while executing the python file, it's not able to execute lines 144,134,86,349 and it is also not able to locate the java directory. Anybody know how to fix this?

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      Did you install the right Java version? And did you moved it into the log4j-shell-poc directory?

    • @karthikbt7239
      @karthikbt7239 2 ปีที่แล้ว

      @@Roelox yes sir. I did both. I installed the proper version and moved it to the right directory. I don't understand why the code isn't working

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      @@karthikbt7239 Do you have Discord? My discord is Roel#6931. Maybe you could send me a screenshot and i can help you.

    • @karthikbt7239
      @karthikbt7239 2 ปีที่แล้ว

      @@Roelox that would be very helpful. I've sent you a request on discord

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      @@nishantnaik9543 check the java version again.

  • @AadilKB
    @AadilKB 2 ปีที่แล้ว

    can someone help me by explaining, what is the need of the docker? And is there an alternative method if we do not want to use docker? I need to implement this log4j vuln in a simulated environment for project. I am unsure how I can replicate this video without using a docker or if using docker makes sense in my scenario!

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      I think docker is used to make the demo simple. Otherwise you would have to make an own vulnerable website.
      You can replicate this video without using docker.

    • @AadilKB
      @AadilKB 2 ปีที่แล้ว

      @@Roelox I am unsure about which parameters I need to change because I am trying to implement this exploit where there is a vulnerable Ubuntu webserver and there is a kali attacker machine. I am unsure which parameters in the entire process needs to change or how to I do the attack. I know definitely that the evil ldap is on the attacker kali machine right so that means the poc.py needs to state the IP address of the kali machine right? What else needs to change?

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      @@AadilKB Yes the IP needs to be the kali machine's IP. I think nothing else needs to change.

    • @fatrizz
      @fatrizz ปีที่แล้ว

      ​@@Roelox Hi there are you able to help?

    • @Roelox
      @Roelox  ปีที่แล้ว

      @@fatrizz Ofcourse! What is the problem?

  • @kthomas5280
    @kthomas5280 2 ปีที่แล้ว

    Why i cant access to localhost:8080 and refused to connect.. it is exactly same result when i ran the docker and no error message

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      What is the error message?

    • @kthomas5280
      @kthomas5280 2 ปีที่แล้ว

      Hi roel, I just access to local host:8080 by chrome and said that refused to connect. I make sure that 8080 port is not using by tomcat

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      @@kthomas5280 Do you have Discord? My discord is Roel#6931

  • @pennyWise_01
    @pennyWise_01 ปีที่แล้ว

    Everything went well except the connection back to the netcat. Can you help me on this?

    • @Roelox
      @Roelox  ปีที่แล้ว

      Sure, do u have discord? My discord is Roel#6931 I can help u further on discord.

  • @dastox777
    @dastox777 ปีที่แล้ว

    2 questions ,
    1. why i am unable to ping to external ip ?
    2. can you provide the source for the web app ?

    • @Roelox
      @Roelox  ปีที่แล้ว

      External IP?
      And the source for the web app should be in the github repository I think

    • @dastox777
      @dastox777 ปีที่แล้ว

      @@Roelox another question , if i want to execute a remote script or command and not get the shell , is it possible ?

    • @Roelox
      @Roelox  ปีที่แล้ว

      Yes that should be possible, when you run the poc.py a Exploit.java is made. You can modify this Exploit.java file with for example nano. In the file you see "String cmd="/bin/bash"; and that is the line that is used to spawn a shell. So maybe if you modify that line you could execute some other command.

  • @rationalism_communism
    @rationalism_communism 2 ปีที่แล้ว +1

    hi thank you could you make a video about the windows diagnostic tool with opening a word document exploit because the one i do is detected by anti-virus.

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      Are you talking about Follina?

    • @rationalism_communism
      @rationalism_communism 2 ปีที่แล้ว +1

      @@Roelox yes

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      @@rationalism_communism I sadly don't know how to bypass windows defender, sorry.

    • @rationalism_communism
      @rationalism_communism 2 ปีที่แล้ว

      @@Roelox ok

  • @AV_Kumar
    @AV_Kumar 4 หลายเดือนก่อน

    Thanks for this poc

    • @Roelox
      @Roelox  4 หลายเดือนก่อน

      No problem :)

  • @erichhuffman8081
    @erichhuffman8081 2 ปีที่แล้ว

    Need to develop this for a work project. 6yr olds fighting and not letting me focus.
    But I found a new song :D

  • @pratikdograma4322
    @pratikdograma4322 3 ปีที่แล้ว

    Thanks for your effort, so can this exploit be used in windows 10 as a target machine and kali linux as an attacker machine?

    • @Roelox
      @Roelox  3 ปีที่แล้ว

      Uhh i guess if a windows machine in some way is using a vulnerable version of log4j. But idk if thats possible and idk how that works sorry.

  • @davidaw104
    @davidaw104 2 ปีที่แล้ว

    I don't understand. You set netcat at port 9001 then you ran a python script that is a simple http-server running localhost at port 8000 but is listening on port 1389?

    • @Roelox
      @Roelox  2 ปีที่แล้ว

      Netcat listener on port 9001 is for the reverse shell, port 8000 is for the webserver that hosts the java file and port 1389 is for the LDAP server.

  • @alexmapache6389
    @alexmapache6389 3 ปีที่แล้ว

    what's the name of background music? thanks

    • @Roelox
      @Roelox  3 ปีที่แล้ว +1

      synthwave goose - blade runner 2049

    • @alexmapache6389
      @alexmapache6389 3 ปีที่แล้ว

      @@Roelox thanks, good video.

  • @ametresovic6738
    @ametresovic6738 2 ปีที่แล้ว +1

    music bakgroud it BLADE RUNNER 2049

  • @ejaku-fb8hs
    @ejaku-fb8hs ปีที่แล้ว

    I know this is for dummy website. How if I want to attack the real website (lets say youtube), should I know the open port first?

    • @Roelox
      @Roelox  ปีที่แล้ว

      U first need to make sure they are using a vulnerable version of log4j.

    • @Roelox
      @Roelox  ปีที่แล้ว

      Btw attacking websites without permission is illegal!

    • @ejaku-fb8hs
      @ejaku-fb8hs ปีที่แล้ว

      Yes, but how to know the port is opened or not?@@Roelox

    • @ejaku-fb8hs
      @ejaku-fb8hs ปีที่แล้ว

      I just curious about that, dont worry I do not perform illegal action haha@@Roelox

  • @byteafterlife
    @byteafterlife 4 หลายเดือนก่อน

    nice!

    • @Roelox
      @Roelox  4 หลายเดือนก่อน

      Thank you!

  • @محمد-ث5ل1ذ
    @محمد-ث5ل1ذ 3 ปีที่แล้ว

    Thank you bro . This log4j its wtf

  • @TheRavyk3-zg7dj
    @TheRavyk3-zg7dj 2 ปีที่แล้ว

    can you help me?

    • @Roelox
      @Roelox  2 ปีที่แล้ว +1

      Sure, what is the problem?

  • @krzysiek1918
    @krzysiek1918 2 ปีที่แล้ว

    Nice video