Operational information regarding the log4shell vulnerabilities in the Log4j logging library.
-
Updated
Dec 23, 2021 - Python
#
log4shell
Here are 70 public repositories matching this topic...
Scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any application. It is able to even find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too!
log4j
scanner
detector
cybersecurity
pentest
sca
vulnerability-scanner
cve-2021-44228
log4shell
cve-2021-45046
cve-2021-45105
-
Updated
Dec 22, 2021 - Java
Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)
-
Updated
Dec 23, 2021 - Python
Simple local scanner for vulnerable log4j instances
-
Updated
Dec 23, 2021 - Go
Remote command execution vulnerability scanner for Log4j.
-
Updated
Dec 15, 2021 - Shell
A collection of intelligence about Log4Shell and its exploitation activity.
java
ioc
log4j
mirai
cybersecurity
threatintel
cti
log4j2
cobalt-strike
ttp
threatintelligence
cve-2021-44228
log4shell
kinsing
m8220
swrort
muhstik
khonsari
kirabash
sitesloader
-
Updated
Dec 24, 2021 - Python
An Awesome List of Log4Shell resources to help you stay informed and secure! 🔒
-
Updated
Dec 23, 2021
A mitigation for CVE-2021-44228 (log4shell) that works by patching the vulnerability at runtime. (Works with any vulnerable java software, tested with java 6 and newer)
-
Updated
Dec 18, 2021 - Java
Tool that runs a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046
-
Updated
Dec 20, 2021 - Go
Rapidly scan filesystems for Java programs potentially vulnerable to Log4Shell (CVE-2021-44228) or "that Log4j JNDI exploit" by inspecting the class paths inside files
-
Updated
Dec 18, 2021 - Go
Mitigate log4shell (CVE-2021-44228) vulnerability attacks using Nginx LUA script
-
Updated
Dec 15, 2021
Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning or upgrading
-
Updated
Dec 23, 2021 - Java
Multithreaded log4j vulnerability scanner using only bash! Tests all JNDI protocols, HTTP GET/POST, and 84 headers.
-
Updated
Dec 20, 2021 - Shell
Nmap Log4Shell NSE script for discovery Apache Log4j RCE (CVE-2021-44228)
-
Updated
Dec 17, 2021 - Lua
A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell
-
Updated
Dec 18, 2021 - Java
Log4j Shield - fast ⚡ , scalable and easy to use Log4j vulnerability CVE-2021-44228 finder and patcher
-
Updated
Dec 23, 2021 - Shell
log4jshell vulnerability scanner for bug bounty
java
log4j
logger
logging
java-8
vulnerability
vulnerabilities
bugs
bugbounty
vulnerability-detection
vulnerability-scanners
log4j2
secuurity
log4shell
-
Updated
Dec 21, 2021 - Go
Contains all my research and content produced regarding the log4shell vulnerability
-
Updated
Dec 23, 2021 - Java
Improve this page
Add a description, image, and links to the log4shell topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the log4shell topic, visit your repo's landing page and select "manage topics."
On Windows the path contains double \ instead of a single one. c:\folder\lib instead or c:\folder\lib.
{ "path": "c:\\Users\\oli\\Downloads\\test.war::WEB-INF/lib/log4j-core-2.13.3.jar", "file_name": "org/apache/logging/log4j/core/net/JndiManager.class", "hash": "c3e95da6542945c1a096b308bf65bbd7fcb96e3d201e5a22