I've prepared a @tryhackme room to demonstrate #log4j#log4shell CVE-2021-44228, explaining the vulnerability, attack vector, and more importantly, detection, mitigations and patching. Working with THM staff to get this in your hands -- it should be available soon.
If you're running a server with #Log4J, please add the following JVM argument to your command line immediately to protect against a 0-day exploit.
-Dlog4j2.formatMsgNoLookups=true
https://t.co/MWYhEdnS0r
#Java#Security#Infosec