Backup of Log4j2 (No. 2)

• Backup list
• View the diff.
• View the diff current.
• View the diff for visual.
• View the source.
• Go to Log4j2.
  • 1 (2021-12-12 (Sun) 18:47:59)
  • 2 (2021-12-12 (Sun) 23:35:39)

Java > Log4j > Log4j2

• https://logging.apache.org/log4j/2.x/

Log4shell

• http://slf4j.org/log4shell.html

• https://logging.apache.org/log4j/2.x/manual/lookups.html#JndiLookup

• https://github.com/YfryTchsGD/Log4jAttackSurface

• 「やばすぎる」　Javaライブラリ「Log4j」にゼロデイ脆弱性、任意のリモートコードを実行可能　iCloudやSteam、Minecraftなど広範囲のJava製品に影響か
  • https://www.itmedia.co.jp/news/articles/2112/10/news157.html

• https://www.lunasec.io/docs/blog/log4j-zero-day/

• JNDI

.

• https://www.ralphgoers.com/post/why-was-log4j-2-created