{"uuid": "54589faf-28c7-4683-8297-60ee71de23b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-44228", "type": "seen", "source": "https://t.me/bhhub/676", "content": "#BugBountyTips of the Day\nScanning Log4j RCE - CVE-2021-44228 using Nuclei Template shared by @_melbadry9 @daffainfo @DhiyaneshDK   Template -  https://t.co/w4bZ7RFAA1  Reference -  https://t.co/szPUqUhNEB  #hackwithautomation #bugbounty #pentest #security  https://t.co/oOfLzdzk0w\n---\nApache Log4j RCE Attack Flow   - ExploitWareLabs   #bugbountytips #bugbounty  #log4j  #CVE #cybersecurity #infosec  https://t.co/bSKC3i6h1Y\n---\nWohooo, Me and @theabrahack just got awarded a bounty of $15,000 on @Hacker0x01 for log4j RCE , I love how some companies treat zero days  #bugbounty\n---\nHow many times have you been overwhelmed yet when checking out JS files on a website? \ud83d\ude30  Be smart and analyse them in a structured way \ud83d\uddfd  @imranparray101 is here for you with some examples \ud83d\udcaa  #bugbountytips \ud83d\udc47  https://t.co/Z3k6aUnehl\n---\nADenum - A Pentesting Tool That Allows To Find Misconfiguration Through The The Protocol LDAP And Exploit Some Of Those Weaknesses With Kerberos  https://t.co/M1ymtVeeDs #cybersecurity #bugbountytips #hacking #tools  https://t.co/AOjhxAG3T4\n---\nDon't forget to use the handy Burp Proxy Match and Replace rules for finding #Log4Shell, while browsing targets. Pretty simple but effective.  #bugbountytips #bugbounty #infosec #cybersecurity #log4j  https://t.co/HwRK0NxpaC\n---\nLog4j2 RCE Passive Scanner plugin for BurpSuite   https://t.co/PwgT68Mu21  #bugbountytips #bugbounty #cybersecurity #CVE #java #infosec\n---\nI think I\u2019m the first one to get bounty for log4j RCE , $300 on an Informative Report  #bugbounty", "creation_timestamp": "2021-12-12T13:37:04.000000Z"}