一、搭建log4j2环境
sudo su
# 拉取
docker pull vulfocus/log4j2-rce-2021-12-09
# 运行
docker run -tid -p 38080:8080 vulfocus/log4j2-rce-2021-12-09
# 关闭防火墙（如果有的话）
systemctl stop firewalld
IP+38080端口访问
二、使用 dnslog 测试是否存在漏洞
dnslog服务器常见的有两个：
36-1 log4j2漏洞复现
2024-04-14 18:18:02 38 阅读
![[<span style='color:red;'>漏洞</span><span style='color:red;'>复</span><span style='color:red;'>现</span>]Apache_<span style='color:red;'>log</span><span style='color:red;'>4</span><span style='color:red;'>j</span><span style='color:red;'>2</span>（CVE-2021-44228）](https://img-blog.csdnimg.cn/direct/3aa2ca51887d4a1fa6297154e2521e91.png)
![[CVE-2021-44228]:<span style='color:red;'>log</span><span style='color:red;'>4</span><span style='color:red;'>j</span><span style='color:red;'>2</span><span style='color:red;'>漏洞</span><span style='color:red;'>复</span><span style='color:red;'>现</span>流程详解（vulhub环境）](https://img-blog.csdnimg.cn/direct/c2ad18287ea8491ba61f43f2b28ef749.png)
![（vulhub环境）[CVE-2021-44228]：<span style='color:red;'>log</span><span style='color:red;'>4</span><span style='color:red;'>j</span><span style='color:red;'>2</span><span style='color:red;'>漏洞</span><span style='color:red;'>复</span><span style='color:red;'>现</span>流程详解](https://img-blog.csdnimg.cn/direct/f153fa17213f47b68b35ee2d89b4e3ac.png)
