Log4Shell
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
Manvan33 e2351b753d reverse shell is cleaner 1 year ago
..
http reverse shell is cleaner 1 year ago
ldap Added insecure java config 1 year ago
README.md feat: badhttp docker compiles java classes 1 year ago

README.md

Attacker

An LDAP with data from ldap/*.ldif files An HTTP server compiling and serving java classes from http/src

Usage

Don't forget to

cd attacker

Build and run ldap

docker build ldap -t badldap
docker run --rm -d -p 1389:389 badldap

Test ldap

ldapsearch -x -H ldap://localhost:1389 -b 'dc=example,dc=org' 

Build and run http

docker build http -t badhttp
docker run --rm -d -p 8088:3000 badhttp

Everything

docker kill `docker ps -f ancestor=badldap -f ancestor=badhttp --format "{{.Names}}"` 2> /dev/null; docker build ldap -t badldap; docker build http -t badhttp; docker run --rm -d -p 1389:389 badldap; docker run --rm -d -p 8088:3000 badhttp

Logs

for name in `docker ps -f ancestor=badldap -f ancestor=badhttp --format "{{.Names}}"`; do docker logs -f $name &; done