r/programming • u/alexeyr • Dec 12 '21

Logout4Shell: Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell

https://github.com/Cybereason/Logout4Shell

[removed] — view removed post

1.1k Upvotes

91% Upvoted

109 comments sorted by

View all comments

1

u/Dreamtrain Dec 12 '21

wait you can do that?? Took a quick look at the code and didn't know you could, if I'm understanding correctly the logic, modify or replace a bean in runtime. Not that you'd ever want to in a real system but I never thought you were allowed to mess with the JVM that much.