Apache Log4j2 Jndi RCE

16 points by CodeHz 4 years ago | 3 comments

CodeHz 4 years ago |

Tested on: Steam (search box), Apple (icloud), Minecraft (both server and client, just type PoC in chat box) (Tip: use dnslog to test(no payload), so it should not cause any problems)

CoderHY 4 years ago | |

Just tested and I can confirm it also works on samsung cloud storage and all Naugthy dog games. This is going to be big.

(also could not reproduce on iCloud, what url did you use?)

Fabiolino 4 years ago |

Tested on google photo using dnslog, confirm it is working there too