From 5ac6d12fe9309786905f9928a35b841de90ecb6b Mon Sep 17 00:00:00 2001 From: vakarisz Date: Wed, 5 Jan 2022 15:47:45 +0200 Subject: [PATCH] Agent: fix log4shell exploitation indication --- monkey/infection_monkey/exploit/log4shell.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/monkey/infection_monkey/exploit/log4shell.py b/monkey/infection_monkey/exploit/log4shell.py index c4ef8c3dd..361190c75 100644 --- a/monkey/infection_monkey/exploit/log4shell.py +++ b/monkey/infection_monkey/exploit/log4shell.py @@ -82,7 +82,9 @@ class Log4ShellExploiter(WebRCE): ldap_thread.join(Log4ShellExploiter.DOWNLOAD_TIMEOUT) ldap.stop() - return True + + # If java class was downloaded it means that victim is vulnerable + return Log4ShellExploiter.HTTPHandler.class_downloaded def build_ldap_payload(self): interface_ip = get_interface_to_target(self.host.ip_addr)