{"uuid": "52cb8228-063e-46fd-9e30-38637ef511b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44228", "type": "seen", "source": "https://t.me/hacking_Attack/36219", "content": "Black Hat Ethical Hacking\nOffensive Security Tool: log4j Honeypot Flask\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: log4j Honeypot FlaskPost Views: 31 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes\n\nOffensive Security Tool: log4j Honeypot Flask GitHub Link log4j-honeypot-flaskNow that Log4j has been discovered, a scanner we had shared released, and an existing PoC to showcase the damage it can do, we are sharing another HoneyPot tool mechanism that can help you detect for such attacks happening in your company internally or externally specifically for this, based on the patterns and reverse engineering of the tool that took place. You can setup this Honeypot, set up notifications, and stay steps ahead mitigating it from being compromised with this latest Zero Day release CVE, affecting a big number of Apache Servers.\n\nLog4j Honeypot Flask by BinaryDefense is an internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228.\n\nThis can be installed on a workstation or server, either by running the Python app/app.py script directly (you\u2019ll need python3, Flask, and Requests) or as a Docker container.\n\nYou will need to set some environment variables (or hard-code them into the script): WEBHOOK_URL=your Teams, Slack or Mattermost webhook URL to receive notifications HONEYPOT_NAME=unique name for this honeypot so you know where the alerts came from HONEYPOT_PORT=8080 or whatever port you want it to listen on.\n\nAll it does is watch for suspicious string patterns in the requests (form fields and HTTP headers) and alert you if anything weird comes through by sending a message on Teams or Slack.\n\nImportant Note: This is a LOW-INTERACTION honeypot meant for internal active defense. It is not supposed to be vulnerable or let attackers get into anything.\nSee Also: Complete Offensive Security and Ethical Hacking Course Example running via Docker:docker build -t log4j-honeypot-flask:latest . docker run -d -p 8080:8080 -e WEBHOOK_URL=https://yourwebhookurl -e HONEYPOT_NAME=dmz_log4j_hp log4j-honeypot-flaskSee Also: Apple fixes macOS security flaw behind Gatekeeper bypass Example running via command line:export WEBHOOK_URL=https://yourwebhookurl export HONEYPOT_NAME=LittleBobbyJNDI export HONEYPOT_PORT=8081 python3 app/app.pyhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/log4j-scan-90x90.png Offensive Security Tool: log4j-scan1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/40pivot2-90x90.png Offensive Security Tool: Cobalt Strike2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/gomapenum-90x90.png Offensive Security Tool: GoMapEnum3 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/hashcat-90x90.png Offensive Security Tool: Hashcat4 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/bugbountytools-90x90.png Offensive Security Tools: Awesome Bug Bounty Tools1 month ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/unknown-1-90x90.png Offensive Security Tool: Pentesting Tools1 month ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/unknown-90x90.png Offensive Security Tool: DotDotPwn \u2013 The Directory Traversal Fuzzer2 months ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-1-90x90.png Offensive Security Tool: ZipExec2 months ago\n* [...]", "creation_timestamp": "2026-09-01T20:02:01.673363Z"}