[HINDI] What is log4shell Vulnerability? | log4j 0day RCE | All Technical Explanation
Hello everyone. in this video I will explain about a very popular vulnerability called ShellShock, which is exploited as a result of improper handling of function definitions by the Bash shell. You may know a lot about it, but not as much as I have curated. This video is gonna be helpful for all, it contains all the technical info you need to know for and about the issue. So let's get started!! Resources: log4j vulnerabilities: https://ift.tt/3365DXB log4shell: https://ift.tt/3pq2quP Cloudflare: https://ift.tt/3mK41tE Wired: https://ift.tt/3IMdav0 CVE-2021-44228: https://ift.tt/3rRjVG1 JNDI Exploit: https://ift.tt/3JFPh9d log4j Sample Vulnerable Web App: https://ift.tt/3lPF4N6 Topics explained in this video: 00:00 Introduction 01:48 What is log4shell? 05:35 Why logging is done in applications? 07:58 What is log4j library? 09:23 Example use of log4j 10:31 Log4j 2 Lookups 12:36 What is LDAP? 13:58 Introduction to JNDI 15:58 The log4j Vulnerability 22:41 Practical Demonstration of the vulnerability 26:41 Use of canarytokens for JNDI lookup 29:12 JNDI Exploit kit 30:34 Setting up Malicious LDAP Server 32:33 Getting RCE with reverse shell 34:41 log4shell Mitigations 38:10 Conclusion ============================================================================================================================================================================================================ If you want to learn Ethical Hacking in Hindi, I have made a course: Complete Ethical Hacking Bundle: https://ift.tt/3dzImAI Total Enrolled: 300+ Part-1, TechHacker Pre-Hacking: https://ift.tt/38nvtVC Total Enrolled: 500+ Part-2, TechHacker Exploitation: https://ift.tt/2ZxHkMJ Total Enrolled: 300+ Part-3, TechHacker Advanced: https://ift.tt/36f4mvo Total Enrolled: 100+ If you want to learn Python programming in Hindi, I have made a course on Udemy: Python for Beginners | Learn Python Programming in Hindi: https://bit.ly/3aHc1nE Total Enrolled: 17000+ If you want to learn Bash Scripting and Shell Programming for Automation in Hindi, I have made a course: Bash for Beginners | Learn Shell Scripting for Automation: https://ift.tt/3yfyV1a Total Enrolled: 100+ --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Official Website: https://ift.tt/3aoSB6A Follow this link to join my Telegram Channel: https://t.me/bittentech Follow me on Twitter : https://twitter.com/techhacker98 Follow me on Instagram : https://ift.tt/32JMSnw ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- If you liked my video, please don't forget to press the like button and SUBSCRIBE to my youtube channel. I will be posting videos on cyber security, ethical hacking and technology. Also some interesting tricks and techniques very soon so stay tuned and thanks for watching....:-)
Hello everyone. in this video I will explain about a very popular vulnerability called ShellShock, which is exploited as a result of improper handling of function definitions by the Bash shell. You may know a lot about it, but not as much as I have curated. This video is gonna be helpful for all, it contains all the technical info you need to know for and about the issue. So let's get started!! Resources: log4j vulnerabilities: https://ift.tt/3365DXB log4shell: https://ift.tt/3pq2quP Cloudflare: https://ift.tt/3mK41tE Wired: https://ift.tt/3IMdav0 CVE-2021-44228: https://ift.tt/3rRjVG1 JNDI Exploit: https://ift.tt/3JFPh9d log4j Sample Vulnerable Web App: https://ift.tt/3lPF4N6 Topics explained in this video: 00:00 Introduction 01:48 What is log4shell? 05:35 Why logging is done in applications? 07:58 What is log4j library? 09:23 Example use of log4j 10:31 Log4j 2 Lookups 12:36 What is LDAP? 13:58 Introduction to JNDI 15:58 The log4j Vulnerability 22:41 Practical Demonstration of the vulnerability 26:41 Use of canarytokens for JNDI lookup 29:12 JNDI Exploit kit 30:34 Setting up Malicious LDAP Server 32:33 Getting RCE with reverse shell 34:41 log4shell Mitigations 38:10 Conclusion ============================================================================================================================================================================================================ If you want to learn Ethical Hacking in Hindi, I have made a course: Complete Ethical Hacking Bundle: https://ift.tt/3dzImAI Total Enrolled: 300+ Part-1, TechHacker Pre-Hacking: https://ift.tt/38nvtVC Total Enrolled: 500+ Part-2, TechHacker Exploitation: https://ift.tt/2ZxHkMJ Total Enrolled: 300+ Part-3, TechHacker Advanced: https://ift.tt/36f4mvo Total Enrolled: 100+ If you want to learn Python programming in Hindi, I have made a course on Udemy: Python for Beginners | Learn Python Programming in Hindi: https://bit.ly/3aHc1nE Total Enrolled: 17000+ If you want to learn Bash Scripting and Shell Programming for Automation in Hindi, I have made a course: Bash for Beginners | Learn Shell Scripting for Automation: https://ift.tt/3yfyV1a Total Enrolled: 100+ --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Official Website: https://ift.tt/3aoSB6A Follow this link to join my Telegram Channel: https://t.me/bittentech Follow me on Twitter : https://twitter.com/techhacker98 Follow me on Instagram : https://ift.tt/32JMSnw ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- If you liked my video, please don't forget to press the like button and SUBSCRIBE to my youtube channel. I will be posting videos on cyber security, ethical hacking and technology. Also some interesting tricks and techniques very soon so stay tuned and thanks for watching....:-)
Comments
Post a Comment