CVE-2021-44228: Log4j / Log4Shell Security Research Summary

This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell.

• Threat Intel
• Mitigations / Fixes
• Malware Reports
• Advisory
• IOCs / Callback Domains / IP Addresses
• Honeypots
• Payloads / Obfuscation / WAF Bypass
• Vulnerability Scanning
• Exploitation
• Trainings

Thanks to Malware Unicorn for the logo!

Source: https://malwareunicorn.org/log4shell_logo.png