Minecraft hacking with PYTHON and Log4j // Netcat reverse shell exploiting CVE

Create your own virtual machine on Linode with 60-day $100 credit*

* Please note: Credits expire in 60 days. Errata: The promo code mentioned in the video is incorrect - you need to use the link above to automatically add credit.

* Thanks to Linode for sponsoring this video!

It's really important that you update your servers to no longer use vulnerable versions of log4j.

// MENU //
0:00 ▶️ Introduction
1:45 ▶️ Topology and overview of problem
3:10 ▶️ Demo of rickroll attack
5:48 ▶️ Netcat reverse shell attack demo
9:17 ▶️ Entire process on a new cloud server

// SCRIPTS //

// MINECRAFT SETUP //

// JOHN's VIDEO //

// SOCIAL //

// MY STUFF //

// SPONSORS //

minecraft
python
log4j
cve-2021-44228
java
java log4j
Log4jRCE.java
RCE
Log4Shell
minecraft log4j
minecraft windows 11
minecraft windows
minecraft server
reverse shell
windows
windows 11
windows 10
real time protection
windows anti virus
windows real time protection
python windows
windows python

Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites.

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

#log4j #minecraft #python

[neospindrift]

The way he says “you’ll be able to rickroll people” so seriously just made my day

[mattplaygamez]

2010: Minecraft was a game
2021: Minecraft is the new hacking tool

[_AultraGreen_]

I've never seen an adult taking minecraft so serious especially rick rolls
However, I think this video is very good and shows what you need to do so your server won't get hacked this easily

[gregorylepoux]

Presently studying ethical hacking on my own and presently happy you did the video even if I don't yet understand what is going on

[numberiforgot]

I’ve been seeing a LOT of hacking tutorials on YouTube lately. There was a time once where YT would automatically delete any content regarding exploits or hacking. It’s good to see them loosen the reigns so people new to infosec can learn from the pros like you.

[educastellini]

-Great content Professor David...!!!
-In the company where I work and in the community that I follow this exploit is a concern and we did all the prevention and checking of updated systems.
-But all zero day exploits on specific systems are always a concern, even more those that create reverse shell, if it is a common good that exists in many systems then it becomes more worrying, and this one will make a lot of people sleep in the end of year.
-Thanks for the knowledge...!!!

[davidbombal]

Create your own virtual machine on Linode with 60-day $100 credit*

* Please note: Credits expire in 60 days. Errata The promo code mentioned in the video is incorrect - you need to use the link above to automatically add credit.

* Thanks to Linode for sponsoring this video!

It's really important that you update your servers to no longer use vulnerable versions of log4j.

// MENU //
0:00 ▶ Introduction
1:45 ▶ Topology and overview of problem
3:10 ▶ Demo of rickroll attack
5:48 ▶ Netcat reverse shell attack demo
9:17 ▶ Entire process on a new cloud server

// SCRIPTS //

// MINECRAFT SETUP //

// JOHN's VIDEO //

// SOCIAL //

// SPONSORS //

Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites.

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

[bobwong]

👍👍👍👍👍Wow, amazing David!
A step-by-step follow-up video on "Patching log4j" would be nice, please.
If that could be automated & documented in Git repo would be a plus+ ;)
Once again, thank you.

[baghramyan]

Log4J is the cybersecurity FuckUp of the year.

[scrpt]

Man, i dont know what to say!!
You are just freaking awsome teacher for us, really thanx for teaching these for us❤️

[jk_tecs]

Great work Sir
You create awareness as you educate
You a world's treasure

[MaxetTV]

Thank you for explaining in details in the end! That's good strategy, because if you explain it in the beginning, video would have bad retention.

[akshat]

Didnt he just rick roll us 4 times in an video without actually hacking us...🤣🤣🤣


Btw great content....love what u are doing..

[aravbudhiraja]

The Log4j vuln is spreading like wildfire...reminds of drupalgeddon 2 and joomla 2015 rce. Also congrats on 800k!

[AlexElement]

Love how every Bombal's video start with ""Now please note, what I'm sharing here is for educational purposes only
:D
Thanks David! Keep up

[wind_explorer]

I can imagine the amount of 6 years olds excited to see this video then realizes you ain’t gonna understand these without at least half a year of IT experiences

[ChrisGreer]

Nice work on the video David! Before you shut your lab down, get a pcap from the Minecraft server side! 😀

[unknownworld]

Great educational video! Thanks for the info! Now I know how to secure my own mc server! 😊🙂🙏

[quandale]

I love how he says "for educational purposes" and tell you how to hack a Minecraft server

[guilherme]

Oh Java, we could have been great friends.
Thanks David and congratulations on 800 k.