Rachid Zarouali xinity

To deploy, create a Lambda function and enable function URL (no auth - yolo), then use the handler above in your function. That same implementation will also work with API Gateway HTTP (aka v2), if you want to use ALB or API Gateway REST (aka v1) you should swap the schema used for parsing.

Then you can test using a POST request with this body:

{
  "jsonrpc": "2.0",
  "method": "tools/list",
  "id": 2
}

Talos

cat << EOF > patch.yaml
cluster:
  proxy:
    disabled: true
  network:
    cni:
      name: none

Cluster API OpenStack using Flatcar

This is done on devstack environment.

Resources

From an existing Kubernetes cluster deployed with Kind:

Update: Please see Bishop Fox's rapid response post Log4j Vulnerability: Impact Analysis for latest updates about this vulnerability.

Technologies using Apache Log4j

The Cosmos 🌌 team at Bishop Fox 🦊 is currently researching open-source projects that appear to use Log4j by default.

Apache Druid
Apache Dubbo
Apache Flink
Apache Flume

	#!/bin/bash

	# Function to display usage information
	usage() {
	echo "Usage: $0 /path/to/input.mp4 [ /path/to/output_directory ]"
	exit 1
	}

	# Check if at least one argument (input file) is provided
	if [ $# -lt 1 ]; then

	#! /usr/bin/env python3

	'''
	Needs Requests (pip3 install requests)

	Author: Marcello Salvati, Twitter: @byt3bl33d3r
	License: DWTFUWANTWTL (Do What Ever the Fuck You Want With This License)


	This should allow you to detect if something is potentially exploitable to the log4j 0day dropped on December 9th 2021.

	$Principal = New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())

	# Add log color command to clipboard
	Set-Clipboard -Value "log_color General FFD700FF; cl_showpos 1"

	# Start CSGO
	(New-Object -Com Shell.Application).Open("steam://rungameid/730")

	Start-Sleep 10

	# $1: vault namespace
	# $2: Vault Token Reviewer Service Account
	vault_namespace=${1:-"vault"}
	token_reviewer_sa=${2:-"vault"}
	if [ -z "${VAULT_TOKEN}" ] \|\| [ -z "${VAULT_ADDR}" ]; then
	echo "ERROR: VAULT_TOKEN and VAULT_ADDR env vars are required"
	exit 404
	fi

	cat <<EOF \| kubectl apply -f -

	#!/bin/bash
	# requires curl and jq
	# assumes usage of Gitlab API v4
	# hella hacky

	url="https://git.example.net"
	token="abcdefghijklmnop"
	username="$1"

	# output is always paginated - get total number of pages from http header

	loki-install:
	sh ./variables.sh
	sh ./setup-loki-fluentbit.sh