There’s an unpatched pre-auth RCE in Apache Log4j2. It works against the current release. It has no CVE, no vendor advisory, and no patch. A working PoC and a Nuclei template are both already publi...

Often when doing penetration tests, clients will ask me to scan their external network presence1. For smaller companies, I can often use nmap from start to finish for all my scanning needs. However...