Author: MDIT Security Research Team

The MDIT Security Research Team comprises certified cybersecurity professionals specialising in VAPT, web application security, mobile app testing, PCI DSS compliance, ISO 27001, and digital forensics for Indian enterprises. Our analysts hold certifications including CEH, OSCP, CISSP, and ISO 27001 Lead Auditor.

Log4j

Table of Content Log4jShell What is log4j What is LDAP and JNDI LDAP and JNDI Chemistry Log4j JNDI lookup Normal Log4j scenario Exploit Log4j scenario Pentest Lab Setup Exploiting Log4j (CVE-2021-44228) Mitigation Log4jshell CVE-2021-44228 Description: Apache Log4j2 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0 JNDI features used in the configuration, log messages, and parameters do not […]