Log4J - CVE 2021-44228 (Log4Shell) - Exploitation & Mitigation

In this video, I demonstrate the process of exploiting the Log4J vulnerability, also known as Log4Shell as well as explore the process of mitigating the vulnerability on Apache Solr.

//WHAT IS LOG4J?
Apache Log4j is one of the most widely utilized, open-source Java-based logging utilities. It is used by various Apache solutions like Apache Tomcat, Apache Solr, and Apache Druid to name a few.

//WHAT IS LOG4SHELL?
On November 30th, 2021, the Apache log4j development team was made aware of a vulnerability in Log4j that could allow the injection of malicious input that could consequently facilitate remote code execution.

On December 9th, 2021, the Infosec community was made aware of this finding and the far-reaching impacts of the vulnerability.

The vulnerability could potentially allow attackers to take control of any system running Log4j by logging a certain string.

The vulnerability, now assigned as CVE-2021–44228 has a severity score of 10 (CRITICAL) and has been dubbed “Log4Shell”.

//LINKS

//PLATFORMS

//SOCIAL NETWORKS

//BOOKS

//SUPPORT THE CHANNEL

//CYBERTALK PODCAST

//WE VALUE YOUR FEEDBACK
We hope you enjoyed the video and found value in the content. We value your feedback, If you have any questions or suggestions feel free to post them in the comments section or contact us directly via our social platforms.

//THANK YOU!
Thanks for watching!
Благодарю за просмотр!
Kiitos katsomisesta
Danke fürs Zuschauen!
感谢您观看
Merci d'avoir regardé
Obrigado por assistir
دیکھنے کے لیے شکریہ
देखने के लिए धन्यवाद
Grazie per la visione
Gracias por ver
شكرا للمشاهدة

-----------------------------------------------------------------------------------
#Log4J#Log4Shell#CVE-2021-44228

[viruldojitha]

I had read your book about Privilege Escalation Techniques... And man that is really awesome... It is one of my favorite hacking books... Keep going I mean write more books I know it takes a long time to write a book but that book is really really fantastic...

[FaTmWit]

I have been watching you for a while and you make it all so clear and understandable for begginers like me! keep it up you are amazing

[rydmerlin]

To detect I use lsof -p <pid> and recursively check the jars reported for log4j classes.

[rudrasalaria]

You're really giving proper knowledge about everything with full detail. Thank U.
Lots of Love to you from India. ❤🇮🇳

[saidinesh]

You have no idea how grateful I am for tNice tutorials series

[truetierra]

Great content. This is one of those vulns that is kinda fun to watch (as a threat responder) what slips past the IPS as the days go on.

[BiffBifford]

I can't believe I am getting this information... FOR FREE!

[shawnchambers]

It got behind my Untangle home firewall....ate it for lunch. Yea this one is insane. Will probably install pfsense for a while

[abdulsamadmuyideen]

ooh finally, thanks man.. also pls could you do a lil video on buffer overflow or any u could recommend

[jamalkhan]

Thank you for such a great and to the point explanation!!!

[hambroman]

had to watch this for a class but... why does the intro music go so hard?

[A.O.U]

Very good video, thank you very much 👍

[Arfat-Khan]

I have exploit no rate limit, but now its been duplicate, what else i can do based on no rate limit. Further what can i exploit?

[qibcentricsplayground]

hi there i followed everything but my netcat has issues whereby it doesnt listen even though it says it is "listening". pls help

[jawadsher]

please make a video about JNDI what is JNDI and how it works

[rtkaliluvr]

How you record screen and your cam in Linux?

[shellgenius]

Sir I've one doubt why log4 used in apche server for keep track logging
There's lot is language for using keep track logging

[disrael]

What about showing how NSO 0 day iMessage exploit worked

[officewires]

Sir please, I want to know how to get the files build-debug, from the Quasar program, thanks for your videos ❤️

[ahmedahmed-mokj]

sir please explian RCE whatsapp by GIF