漏洞描述
OWASP Zed Attack Proxy 简称 ZAP，是一个开源的安全测试工具，功能和 Burpsuite 基本一样，它们同样使用 Java语言编写,记录错误日志时使用logj，同样存在jndi注入
OWASP ZAP Log4j 远程命令执行漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-45046-DAST: Apache Log4j2 - Remote Code Injection
- POC CVE-2021-44228: Apache Log4j2 Remote Code Injection
- POC CVE-2021-45046: Apache Log4j2 - Remote Code Injection
- POC CVE-2017-5645: Apache Log4j Server - Deserialization Command Execution
- POC CVE-2021-44228: Apache Log4j2 Remote Code Injection
- POC apache-ofbiz-log4j-rce-temp: Apache OFBiz Log4j JNDI RCE
- POC apache-ofbiz-log4j-rce: Apache OFBiz Log4j JNDI RCE
- POC cisco-cloudcenter-suite-log4j-rce: Cisco CloudCenter Suite (Log4j) - Remote Code Execution
- POC solr-log4j-rce: Apache Solr Log4j Remote Code Execution
- POC unifi-network-log4j-rce: UniFi Network Log4j JNDI RCE
- POC vmware-vcenter-log4j-jndi-rce-temp: VMware VCenter - Remote Code Execution (Apache Log4j)
- POC vmware-vcenter-log4j-jndi-rce: VMware VCenter - Remote Code Execution (Apache Log4j)
- POC vrealize-operations-log4j-rce: VMware vRealize Operations Tenant App Log4j JNDI Remote Code Execution