Log4Shell: The Movie... Why your sysadmins are working into the holidays

Log4Shell is an infamous security hole - actually, three different bugs - affecting millions of servers around the world. Find out why your sysadmins and cybersecurity staff are "taking three for the team" just as holiday season starts...
news.sophos.co...
nakedsecurity....
news.sophos.co...

[@papanito4802]

Excellent video, step by step into the misery. Very informative.

[@bubblespawn]

Excellent video, thanks Paul

[@envoycdx]

Cheers.

[@ProTechShow]

Great demo. Very clear and easy to follow.

[@GillesVolluzGasdia]

Excellent video, thanks Paul!

[@leparrainrom2881]

Nice, do you have somewhere the source code of your html page ?

[@NakedSecurityBySophos]

-- Run via ncat, something like this: -- -- > ncat-vv -l 7777 --lua-exec fauxlogger.lua -- -- faulogger.lua-- local function trim(r) return r:gsub('%s*(.*)%s*$','%1') end local function getl() return trim(io.read('*l')) end local function putl(s) io.write(s,' ') io.flush() end local function putraw(s) io.write(s) io.flush() end local function say(f,...) io.stderr:write(string.format(f,...),' ') io.stderr:flush() end say '' local h = getl() say('--COMMAND: %s',h) local f = h:match('GET /%?Phone=(.*) HTTP/1%.1') if not f then putl 'HTTP/1.1 418 Cannot fill teapot' putl 'Connection: close' putl '' say(' ERROR: 418 Cannot fill teapot') return end f = f:gsub('%%(%x%x)',function(s) return string.char(tonumber(s,16)) end) say('--PHONE NO: [%s]',f) -- Read headers (stop at blank line) for i=1,99 do local r = getl() if r == '' then break end end -- Deal with data putl 'HTTP/1.1 200 OK' putl 'Connection: close' putl 'Content-Type: text/html' putl '' putl 'Submitted' -- Log it say '--LOGGING VIA JAVA:' os.execute('java TryLogger.java "'..f..'" 1>&2') say '==========' say ''

[@leparrainrom2881]

@@NakedSecurityBySophos Thanks !