LOG4J Vulnerability: Easiest Explanation with Live Demo🔥

[@SpinTheHack]

Apke earphones sahi hai bas thoda voice gadbad hai... Maaf krna😂

[@m0hi8]

It's ok. knowledge doesn't require sound quality. ❤️

[@m0hi8]

What if I found this vulnerability on any program on hackerone program or somewhere will I get bounty or not.

[@satishpatro]

Biaurnal wla microphone hai kya?

[@LaxmiNarayana]

Bro zsh: error permission denied

[@m0hi8]

@@LaxmiNarayana use sudo

[@adrishbora]

Simplest explanation with example, bhaiya! Exams chal rahe hai lekin fir bhi syllabus se zyada asani se log4j samajh me aa gaya 🫀

[@SpinTheHack]

Wah..Chalo Humari Teaching Se Logo Ko Fayda Toh Huva....Bas ese support karte rehna.♥️

[@adrishbora]

@@SpinTheHack hamesha support karenge bhaiya! PS: AZ-500 ka course Jan ya Feb me aayega (@STHpathshala)? Due to school exams abhi bhi AZ-900 me appear nahi ho pa Raha 😂

[@naturallyaspirated6209]

Excellently explained in ~15 mins. Thanks a lot for this 👌🏻

[@pankilchhabra5584]

Bhai bohot sahi explain kiya mere client ko bhi same problem aa rhi thi

[@zainraza2943]

Great piece of work :) "Bhai sab simple tool hain zyada uchalne ki zaroorat nhy" was give me huge laugh :D :D

[@rakeshbehera8696]

Very clearly explained about the Log4j vulnerabilty.

[@iakashx]

This was useful. It felt like.. LogPoisoning -> CSRF -> RCE

[@zipp5022]

kisi aur ka samaj nahi aaya sirf aapka explaination best tha😃😃😃

[@navneetg4158]

Thanks, I would say end to end packet follow was explained so nicely that I could frame everything in mind. Appreciated !!

[@knandinidora_UI_UX]

Everytime I watch your videos, I always learn something new 🤩🤩🤩

[@jiteshpahwa266]

15 min me kafi kuchh smjha diya..... nice ;)

[@deeprajsinghrajput5272]

thanks. aapne easy language me samjhane ki kosis ki hai..

[@venomx2131]

bhai super duper aise hi video banaya karo keep it up

[@chiragsoni7592]

Very nicely explained. Thanks for your efforts. Keep doing...

[@lamiyarahman2954]

log4j seems quite interesting. thank you for the explanation.

[@physics3641]

This channel can be huge for teaching ethical hacking in hindi. I will also check all latest videos later. Keep up this good work.👍👍

[@princemehra12]

Thanks you so much bro for explaining in such easy language.

[@SpinTheHack]

Welcome and keep supporting

[@FloppyHat]

amazing video brother... Good work.

[@hacker3.070]

bhot accha tha videos good videos boss all time support he

[@zainahmed6326]

Nicely Explained bro

[@mojatv2960]

#Bangladesh nice bro Bug Bounty upor video aro chaiye

[@cybersecurityindia3268]

dhamakedaar video

[@tushar4250]

Thank Sir Bohot Accha Samjhaya Apne

[@rajivparikh12]

Excellent work mate, thanks for uploading this video. very helpful. LDAP pronounced L DAP not LD A P.

[@SpinTheHack]

Surely, I will take a note of yur feedback.

[@abhishekpaweria7185]

nice work brother 🥳🥳🥳🥳🥳

[@thenewindia1701]

like kr diya . ab aap ldap server banana sikahiye aur detail me long video banaiye

[@WorldOfWonders-facts]

Very interest, it's help me lots thank you

[@Ramesh-vz7bf]

Thanks bro. Nice information about log4j.

[@peace8265]

Well explained dude. Keep doing the good work.

[@ravindrabhatt]

You could also include how to prevent these attacks please. Excellent video btw

[@kundankumarpathak7924]

Arey CyberZeel Bhai ❤

[@poojashah5419]

Thank you for explaining in an easy way

[@Cybergazi007]

Thanks for great information ℹ️

[@knandinidora_UI_UX]

Awesome 🤩🤩🤩

[@sunitasingh-mt1mc]

Thank you for explaining ☺️

[@harshalmore8284]

Very easily explained video , it was an very interested video 👍 .

[@DKs_youniverse]

Nicely explained. Thanks a lot!

[@yeswecancook7809]

thank you so much. this is very helpful

[@ashiqurrahman275]

keep it up, from Bangladesh

[@HackerJi01]

It's really amezing Zeel bhai.....❤️❤️❤️👍👍🤗🤗

[@harshvardhanbuddala6599]

Amazing video bhai..🤩🤩 Keep teaching us like this .🤝🏻🤝🏻

[@RajeevKumar-mz6qs]

Theories kafi dekha.. but ye code example was better

[@tossthis5626]

Bhai yum Kai log4j immediately suaoka exploit umpar ki sum dim run the command? Love you video.

[@eraedith696]

Always best and simplest way of teaching by @thecyberzeel bhyia🥳🥳 keep going..

[@errorcode0101]

knowladge full video contant 👍

[@vaishalirani4562]

Thanks for this detailed explanation..

[@pythonpneedtobeleran3583]

Thanks for this knowledge bro 👏

[@himanshu3984]

Bhai THM ke alawa bhi youtube pr apni vdos continue rkho please bhai

[@FS0ci3ty]

Perfect explaination for beginners

[@tusharkakkar7567]

I am looking for the part that happens after the attack, i.e. where and how the malicious software is sent by hacker after exploiting log4j.

[@SpinTheHack]

Hacker doesn't send any mailicious software, we just create a netcat reverse shell to execute command on the vulnerable server using our ldap and netcat

[@riyazadoreable]

@@SpinTheHack No hacker can send the malware as well. In fact hacker can install the mining software to perform crypto mining without user consent

[@saritajena7116]

Amazingly explained...

[@SpinTheHack]

Glad you liked it

[@ethicalkaran]

thankyou for easy explaination

[@mrinank]

Very well explained thanks 😊

[@summmmmm8667]

Thank you for explaining...

[@utensilapparatus8692]

Love your thumbnail...

[@mr.techno1517]

Thank you so much mota bhai... You're great

[@thepriyank121]

really like it thanks for the content.

[@gauravchaudhari6206]

Excellently explained

[@pankajshet1070]

I would say all the libraries or apps using JNDI may face this problem..? Whats your say ?

[@h4s4n_ma]

Aag lgaadi bhai🔥😍

[@rajp3782]

Sap abap mai How to remove vulnerability for CVA Is par koi video hai aap ke pass

[@shravanmeghavath3566]

sir can you please explain cve 2021-41379 Microsoft Windows Installer vulnerability

[@swapnilwankhede3440]

Good job dear.

[@zalarakshaba]

great sir maja aa gaya

[@devarshparmar5269]

Thanks for explain in easily bhai...

[@TechJaipur]

log4j wala exploit start nhi ho rha

[@sudhirnaik9723]

Excellent 👍

[@praveshkumar5482]

Excellent explain

[@Defendyoursite]

Sir before finding any log4j how to know whether the programme is using log4j library & not

[@BotAmi]

I love spin the hack Bhai

[@vivekpaul4354]

Excellent Video !!!

[@sreshthasaha5953]

Hi, My app is using common-logging jar with log4j1X version. Still i am receiving "{jndi:ldap}" string in my access logs. What should I do?

[@SpinTheHack]

Block it with firewall.

[@hadhikhan7730]

Thanks for uploading.🥰😍

[@AbhishekSinna]

Please let us know how to get rid of this vulnerability on windows server..

[@ankannandi8877]

Will you please suggest How to check log4j vulnerability in windows 2008 server r2 using Java version 7?

[@mukeshkumarpandey9194]

But u didn't explained why and what is the use of using this Vulnerability from @Hacker side. What r the task he can perform using this Vulnerability?

[@dropit5101]

I have query that how can we trace the unknown traffic/attacker of any website or you can say the vulnerability like,the vulnerability in liberia's financial website that was found by phulbani. Or can you make an explanation video on that type of vul.

[@ashutoshuy]

i was expecting this only

[@JerryJoel91]

Thanks man, really helped me. How can I connect with you?

[@prashantsharma-ex7ho]

nice expiation good job bro...

[@relaxsleep5148]

well explained

[@testacctestacc4480]

yeh python 3 poc ke andar kya code kiya he ?? muje run karna he but nahi ho raha he

[@NadeemAnsari-ud1oc]

Awesome video

[@mansikothari8653]

Nice informative video as always but it would have been much better if you would have shown live hunting by yourself. We get notification for canary token but how to traceback that IP. I mean that IP belongs to which target can you please let us know?

[@SpinTheHack]

Go and enjoy my next video to get it.

[@SpinTheHack]

Canary token as added a option which shows you the hostname now.

[@tech4bunny10m9]

Poc mai kya likhna hoga

[@ankursharma5043]

Why is this explanation matching exactly with JavaBrains video

[@khushisingh9881]

Nice explained

[@Jain__aagam]

perfectly explained

[@padmasree3996]

Hi we are using spring boot java application , spring boot by default providing the log4j-api 2.12.2 jar and log4j-to slf4j jar files. We are not using only slf4j, and we didn't used these in pom.xml file, but safer we just added log 4j- 2.15 version jar. There will be any problem or Is there any alternate?

[@foddiebyage9696]

Thts okk just maven update proj it will work

[@andy12829]

If it's on classpath then it would pick your own log4j version and override it with the spring boot one

[@VishalSharma-np6qb]

bhai mene cyber pocket member hu .....gf tools run nhi ho rha h sub try ker ke dekh liya he 2 din se ker rha hu please help me

[@WebWonders1]

Thanks bro fro explanation

[@ehsanali4981]

apki demo pe awaz nhi aa rhi bhai kindly isko set kr den

[@chrisdas7874]

but if the link is given of our own ldap server then the company can easily detect us because of the link so we must have a common ldap link in order to not be tracked

[@rajuthinnaluri7779]

Thanks dude... good job

[@hameermahajani1842]

OP as always!

[@InterestingFacts1195-f8r]

we are using xmapp. shall we be impacted?

[@SpinTheHack]

I guess no you will not get impacted as of now. But to make sure update anything which is Apache in your system.

[@InterestingFacts1195-f8r]

@@SpinTheHack ok bro thanks this video helped alot to understand LOG4J 👍

[@Ryzen0-0]

Aapka koi dusra channel bhi hai kya?

[@pulkitbajaj2107]

Wahh....👏👏👏👏👏

[@devarshparmar5269]

Love your videos

[@LaxmiNarayana]

Zsh:error permission denied ko solve kese kare

[@LaxmiNarayana]

@Cyber Boi chmod kaam nahi kar rha hai

[@LaxmiNarayana]

@Cyber Boi sudo bhi kaam nahi kar rha hai

[@LaxmiNarayana]

@Cyber Boi command ko