Update Log4Shell references and VCenter URI

This commit is contained in:
Spencer McIntyre
2021-12-17 15:53:54 -05:00
parent 6175e38971
commit 60de839b60
3 changed files with 6 additions and 4 deletions
+1 -1
View File
@@ -3,4 +3,4 @@
# Apache Solr
/solr/admin/cores?action=CREATE&wt=json&name=${jndi:uri}
# VMWare VCenter
/websso/SAML2/SSO/photon-machine.lan?SAMLRequest=
/websso/SAML2/SSO/vsphere.local?SAMLRequest=
@@ -22,7 +22,7 @@ This module has been successfully tested with:
5. Do: `run`
6. The target should be identified as vulnerable
### Struts2 Setup
### Apache Struts2 Setup
The following docker file can be used to setup a vulnerable Struts2 instance for testing.
@@ -68,7 +68,7 @@ Time in seconds to wait to receive LDAP connections.
## Scenarios
### Struts2
### Apache Struts2
```
msf6 > use auxiliary/scanner/http/log4shell_scanner
@@ -29,7 +29,9 @@ class MetasploitModule < Msf::Auxiliary
],
'References' => [
[ 'CVE', '2021-44228' ],
[ 'URL', 'https://attackerkb.com/topics/in9sPR2Bzt/cve-2021-44228-log4shell/rapid7-analysis' ]
[ 'CVE', '2021-45046' ],
[ 'URL', 'https://attackerkb.com/topics/in9sPR2Bzt/cve-2021-44228-log4shell/rapid7-analysis' ],
[ 'URL', 'https://logging.apache.org/log4j/2.x/security.html' ]
],
'DisclosureDate' => '2021-12-09',
'License' => MSF_LICENSE,