Migrated from Azure Devops. Contribute to binhlam/log4j-shell-poc-azure development by creating an account on GitHub.

This repo is a dummy repo for the vuln-agent project - ajayrahul11/springboot-log4j-fix

BKLN-2092 E2E test (Gradle counterpart): Gradle project consuming a private artifact from JFrog (com.backline.test:demo-lib:1.0.0) that transitively pulls in vulnerable log4j-core. Validates that t...

Demo: company-standard logging/tracing util lib. Part of a 3-repo chain used to test transitive-dependency vulnerability handling in vuln-remediation-agent. Deliberately depends on a vulnerable log...

Demo: leaf app depending on transdep-demo-service-lib (2 hops from a vulnerable log4j-core dep in transdep-demo-util-common). Test target for the transitive-dependency gap in vuln-remediation-agent...

Aurelius M5 demo — Maven project with a deliberately outdated log4j-core for the log4shell-bump patch runner to fix - aureliusgovenai/m5-log4shell-demo

CVE-2021-44228 Log4Shell reproduced end to end: exploitation through remediation - Wafeeq-Fareed/log4shell-exploitation-lab

Log4j 2's deserialization allowlist permits java.rmi.MarshalledObject, which carries bytes it never inspects. A fully-caged lab for logging-log4j2#4255: six transports, two log4j-core versi...

Contribute to Per0x1de-1337/log4j2-4255-lab development by creating an account on GitHub.

Reproduce log4j2 #4255 deserialization RCE in Docker with JDK 17, validate mitigations, and test detection controls. - Clarapotbellied1003/log4j-4255

log4j-4255. Contribute to yijinglab/log4j2-fois-rce development by creating an account on GitHub.

Defensive analysis of an unpatched Log4j2 FilteredObjectInputStream / MarshalledObject deserialization flaw, with a container exposure scanner and a 53-build survey of real-world Java products. - R...

exploit for Log4j2 (issue 4255). Contribute to joanbono/log4j2-4255-exploit development by creating an account on GitHub.

Pre-auth RCE via FilteredObjectInputStream MarshalledObject bypass in Apache Log4j 2 - hypnguyen1209/log4j2-rce

FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject, auto-triggered during Log4jLogEvent deserialization, leading to unauthenticated RCE on serialized log receivers. - striga-a...

Patch: JNDI injection variant (Apache Log4j). Contribute to gduma-phData/patch-CVE-2025-19000 development by creating an account on GitHub.

automated Python-based cryptographic data recovery tool designed to mitigate post-exploit ransomware encryption vectors. - emad-123/log4j-ransomware-bruteforcer

Cybersecurity virtual experience projects covering Log4j vulnerability response and ransomware recovery with Python. - alainmartar/aig-shields-up-cybersecurity

Apache 生态系统 CVE 漏洞复现靶场 — Struts2, Tomcat, Solr, HTTP Server, Log4j, Commons Text - chengbochuan3/CVE-Apache-Ecosystem

Custom Python script and incident report for Log4j and nested ransomware emulation - Danko0210/Log4j-Ransomware-Analysis-Simulation