woodpecker-appstore / log4j-payload-generator

Log4j jndi injects the Payload generator

0x01 简介

log4j-payload-generator是 woodpecker框架 生产log4 jndi注入漏洞payload的插件。目前可以一键生产以下5类payload。

1. 原始payload
2. {[upper|lower]:x}类型随机混payload
3. {[upper|lower]:x}全混淆payload
4. {::-n}类型随机混淆payload
5. {::-n}类型全混淆payload

0x02 参考

• https://github.com/whwlsfb/Log4j2Scan

log4j-payload-generator's Issues

师傅，你打包的jar包有问题，在java8下无法运行

我尝试自己打包，发现也无法运行。

Issues while adding to burp

java.lang.ClassNotFoundException: burp.BurpExtender
at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:471)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:589)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:522)
at java.base/java.lang.Class.forName0(Native Method)
at java.base/java.lang.Class.forName(Class.java:398)
at burp.ftd.a(Unknown Source)
at burp.ftd.(Unknown Source)
at burp.guy.a(Unknown Source)
at burp.kp.lambda$panelLoaded$0(Unknown Source)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:829)

Issues while adding to woodpecker

How to open the plugin in woodpecker?