30579096 / log4py

pythonic pure python RCE exploit for CVE-2021-44228 log4shell

log4py

pythonic pure python RCE exploit for CVE-2021-44228 log4shell

1. run a vulnerable service like https://github.com/zzzz0317/log4j2-vulnerable-spring-app
2. change settings in exploit.py
3. pwn

This is for educational use only (mostly for my own lol)
This might only be useful after some alterations
if you do illegal stuff - fuck you

#TODO:

• Add compilation capability through javac for more version flexibility
  
• Add more Attack classes for other services
  
• Add more of everything!
  
• Actual tests (lol)
  
• Get out of poc stage