LIVE Demo of Attack and Mitigation Steps in Spring Boot - Log4Shell (Log4j Vulnerability)

This LIVE demo walks you through scenarios of the Log4Shell exploit in the log4j2 core library as well as the mitigation steps to upgrade the log4j-core dependency to resolve the vulnerability in your application.

The attack illustration demonstrates how un-sanitized input is sent to the application and how the malicious LDAP server redirects the requests to a web server hosting the exploit code and how the malicious code gets injected to exploit the vulnerable app with a callback that sends private information to the attacker-controlled server.

Later in the video, we also demonstrate how to update the dependency version in your pom file to mitigate the issue.

Get 10% off with promo code IZZY10
Course on Massive Data Workloads with Open Source Software

Join our Community on Patreon

Details of Log4Shell Vulnerability

Guidance from Apache Log4j Project on How to Resolve It

Link to Log4j2 Core Maven Repo

Artifacts Using Log4j2

[IzzyAcademy]

If you are looking to see how this vulnerability works in a SpringBoot app, this demo shows exactly that.

[bozhokmaria]

Please, make a video how to migrate from log4j 1.xx to log4j 2.xx

[IzzyAcademy]

You also get to see how to update your Maven dependency versions to fix the issue.