LIVE Demo of Attack and Mitigation Steps in Spring Boot - Log4Shell (Log4j Vulnerability)
This LIVE demo walks you through scenarios of the Log4Shell exploit in the log4j2 core library as well as the mitigation steps to upgrade the log4j-core dependency to resolve the vulnerability in your application.
The attack illustration demonstrates how un-sanitized input is sent to the application and how the malicious LDAP server redirects the requests to a web server hosting the exploit code and how the malicious code gets injected to exploit the vulnerable app with a callback that sends private information to the attacker-controlled server.
Later in the video, we also demonstrate how to update the dependency version in your pom file to mitigate the issue.
Get 10% off with promo code IZZY10
Course on Massive Data Workloads with Open Source Software
https://bit.ly/3qx5VPi
Join our Community on Patreon
/ izzyacademy
Details of Log4Shell Vulnerability
https://cve.mitre.org/cgi-bin/cvename...
Guidance from Apache Log4j Project on How to Resolve It
https://logging.apache.org/log4j/2.x/...
Link to Log4j2 Core Maven Repo
https://mvnrepository.com/artifact/or...
Artifacts Using Log4j2
https://mvnrepository.com/artifact/or...