kozmer/log4j-shell-poc

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

1848 stars · 541 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A proof-of-concept exploit tool for the Log4Shell vulnerability (CVE-2021-44228) in the Java log4j logging library. It automates setting up an LDAP and HTTP server, generates a JNDI payload, and includes a Dockerized vulnerable web application for testing.

Use cases

• test my application for the log4j log4shell vulnerability
• reproduce CVE-2021-44228 in a lab environment
• learn how the log4j JNDI injection exploit works
• demonstrate log4shell impact to my team
• run a vulnerable log4j app in docker for security training
• generate a jndi ldap payload for log4j testing

When to choose

• you need a simple, well-known PoC to verify whether a system is vulnerable to Log4Shell
• you want a hands-on educational lab with a Dockerized vulnerable app
• you need an automated LDAP/HTTP exploit server setup for a security demo

When to avoid

• you need a production-grade vulnerability scanner for large-scale asset inventory
• you want a one-click exploit tool for offensive operations
• you need detection or mitigation tooling rather than exploitation
• your target runs a patched or non-Java stack

Facets

cli-tool · maturity maintenance

penetration-testing security developer-tools security penetration-testing developer-tools windows python log4j cve-2021-44228 log4shell exploit proof-of-concept reverse-shell ldap java linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="kozmer/log4j-shell-poc")