Apache Log4j2 Jndi RCE (opens in new tab)

(twitter.com)

16 pointsCodeHz4y ago3 comments

3 comments

Tested on: Steam (search box), Apple (icloud), Minecraft (both server and client, just type PoC in chat box) (Tip: use dnslog to test(no payload), so it should not cause any problems)

CoderHY4y ago

Just tested and I can confirm it also works on samsung cloud storage and all Naugthy dog games. This is going to be big.

(also could not reproduce on iCloud, what url did you use?)

Fabiolino4y ago

Tested on google photo using dnslog, confirm it is working there too

j / k navigate · click thread line to collapse