Featured resource
pluralsight tech forecast
2025 Tech Forecast

Which technologies will dominate in 2025? And what skills do you need to keep up?

Check it out
Hamburger Icon
  • Labs icon Lab
  • Security
Google Cloud Platform icon
Labs

Log4j Vulnerability Lab: Emulation and Detection

In this lab, you will set up and emulate the log4shell exploit against vulnerable applications. When you're finished, you'll have a better understanding of how the exploit works and how to detect it.

Google Cloud Platform icon
Labs

Path Info

Rating
(227 reviews)
Level
Clock icon Intermediate
Duration
Clock icon 2h 35m
Published
Clock icon Aug 26, 2024

Contact sales

By filling out this form and clicking submit, you acknowledge our privacy policy.

Table of Contents

  1. Challenge

    Getting Started in the Lab Environment

    Here are the initial instructions and explanation of the lab environment. Read this while your environment is busy creating itself from nothing. Yes, this violates physics; we know. How fun!

  2. Challenge

    Setup Network Detections

    In this challenge you will setup Suricata and tcpdump for network analysis and detection. You will also test the vulnerable application that will be running on the defender's endpoint.

  3. Challenge

    Setup Malicious LDAP Server and POC

    This challenge will have you testing a Proof of Concept (POC) exploit against a vulnerable application.

  4. Challenge

    Upgrade to a Reverse Shell

    Here you will be upgrading the previous payload to establish a reverse shell and sending commands to the exploited application.

  5. Challenge

    Analysis and Detection

    In this challenge, you will dive into analyzing suricata logs and network traffic based on the previous activity that you generated.

  6. Challenge

    The Last Challenge

    The last challenge of this lab and your last chance to experience the environment before clicking Next and ending this small little world that flittered into existence just for you.

Brandon is a Sr. Security Author at Pluralsight. Prior Experience with Elastic and FL Air National Guard includes threat hunting, security analytics, and incident response.

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Provided environment for hands-on practice

We will provide the credentials and environment necessary for you to practice right within your browser.

Guided walkthrough

Follow along with the author’s guided walkthrough and build something new in your provided environment!

Did you know?

On average, you retain 75% more of your learning if you get time for practice.