| #!/bin/bash | |
| # based on code byLeon Mergen | |
| # see: https://leonmergen.com/automatically-mounting-instance-store-on-an-aws-ami-150da3ffd041 | |
| LVDISPLAY="/sbin/lvdisplay" | |
| PVCREATE="/sbin/pvcreate" | |
| VGCREATE="/sbin/vgcreate" | |
| LVCREATE="/sbin/lvcreate" | |
| MKFS="/sbin/mkfs -t xfs" | |
| MOUNTPOINT="/mnt/data" |
| provider "aws" { | |
| version = "~> 2.0" | |
| region = "eu-west-2" | |
| } | |
| # Providing a reference to our default VPC | |
| resource "aws_default_vpc" "default_vpc" { | |
| } | |
| # Providing a reference to our default subnets |
You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228
This command searches for exploitation attempts in uncompressed files in folder /var/log and all sub folders
sudo egrep -I -i -r '\$(\{|%7B)jndi:(ldap[s]?|rmi|dns|nis|iiop|corba|nds|http):/[^\n]+' /var/log