/tech/ - i have ubuntu18.04 running on vm with unifi-video, i want to test if it is vulnerable to Log4j2 and i want to make a poc.[code]unzip -l /usr/lib/unifi-video/lib/log4j-core-2.1.jar | grep -i JndiLookup[/code]ths look up shows that my unifi-video 3.10.

Email
Subject
Comment
Verification	Please type the name of the object/variant:
File
Embed
Voice
Poll
Password	(For file deletion.)

unifi-video log4j2 Chud 05/13/26 (Wed) 14:28:47 №31727 [Quote]

i have ubuntu18.04 running on vm with unifi-video, i want to test if it is vulnerable to Log4j2 and i want to make a poc.

[code]unzip -l /usr/lib/unifi-video/lib/log4j-core-2.1.jar | grep -i JndiLookup[/code]
ths look up shows that my unifi-video 3.10.3 does have the vulnerable JndiLookup thingy. It also seems to have all the requirements for a proper RCE to work BUT FUCK FUCK FUCK I JUST CANT FUCKING EXPLOIT IT WHAT THE FUCK

https://github.com/puzzlepeaches/Log4jUnifi
i tried this shti and modified so instead of /api/login it sends the request to /api/2.0/login which is the actual endpont unifi-video expects. Has any of you niggas had experience with this shit please help a nigga out.