Scans for Log4j versions effected by CVE-2021-44228

Last update: Jun 30, 2022

Overview

check_mkExtension to check for log4j2 `CVE-2021-44228`

This Plugin wraps around logpresso/CVE-2021-44228-Scanner (Apache License 2.0)

How it works

Run in 5 steps:

Find all .jar, .war, .ear, .aar files recursively.
Find META-INF/maven/org.apache.logging.log4j/log4j-core/pom.properties entry from JAR file.
Read groupId, artifactId, and version.
Compare log4j2 version and print vulnerable version.

You might also like...

Log4j command generator: Generate commands for CVE-2021-44228

Log4j command generator Generate commands for CVE-2021-44228. Description The vulnerability exists due to the Log4j processor's handling of log messag

1 Jan 3, 2022

log4j-tools: CVE-2021-44228 poses a serious threat to a wide range of Java-based applications

log4j-tools Quick links Click to find: Inclusions of log4j2 in compiled code Calls to log4j2 in compiled code Calls to log4j2 in source code Overview

171 Dec 25, 2022

A scanner and a proof of sample exploit for log4j RCE CVE-2021-44228

1.Create a Sample Vulnerable Application . 2.Start a netcat listner . 3.Run the exploit . 5.Use jdk1.8.0_20 for better results . Exploit-db - https://

7 Aug 6, 2022

An automated header extensive scanner for detecting log4j RCE CVE-2021-44228

log4j An automated header extensive scanner for detecting log4j RCE CVE-2021-44228 Usage $ python3 log4j.py -l urls.txt --dns-log REPLACE_THIS.dnslog.

2 Dec 16, 2021

A script to search, scrape and scan for Apache Log4j CVE-2021-44228 affected files using Google dorks

Log4j dork scanner This is an auto script to search, scrape and scan for Apache Log4j CVE-2021-44228 affected files using Google dorks. Installation:

5 Dec 27, 2022

open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability

CVE-2021-44228-log4jVulnScanner-metasploit open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability pre

7 Nov 9, 2022

CVE-2021-44228 log4j 2.x rce漏洞检测工具

#1 使用说明 CVE-2021-44228 log4j 2.x rce漏洞检测工具，对目标链接发起get请求并利用dnslog探测是否有回显 $ python3 log4j-scan.py -h

4 Jan 13, 2022

PortSwigger Burp Plugin for the Log4j (CVE-2021-44228)

yLog4j This is Y-Sec's @PortSwigger Burp Plugin for the Log4j CVE-2021-44228 vulnerability. The focus of yLog4j is to support mass-scanning of the Log

1 Jan 31, 2022

Scans all drives for log4j jar files and gets their version from the manifest

log4shell_scanner Scans all drives for log4j jar files and gets their version from the manifest. Windows and Windows Server only.

1 Dec 29, 2021

Releases(1.1.1)

1.1.1(Jan 3, 2022)

Source code(tar.gz)
Source code(zip)
log4j_scanner-1.1.1.mkp(4.91 MB)
1.1.0(Dec 23, 2021)

Logpresso Log4j2 Scanner version 2.6.1
Source code(tar.gz)
Source code(zip)
log4j_scanner-1.1.0.mkp(4.89 MB)
1.0.1(Dec 22, 2021)

Logpresso Log4j2 Scanner version 2.5.3
Source code(tar.gz)
Source code(zip)
log4j_scanner-1.0.1.mkp(4.67 MB)
1.0.0(Dec 20, 2021)

Source code(tar.gz)
Source code(zip)
log4j_scanner-1.0.0.mkp(4.56 MB)
0.2.4(Dec 20, 2021)
New functionality

Logpresso Log4j2 Scanner version 2.3.7

Scan for logback (CVE-2021-42550)

Scan ZIP

Fixes:

Prevent exits during execution

Changes:

Cache for 4 hours

Source code(tar.gz)
Source code(zip)
log4j_scanner-0.2.4.mkp(4.55 MB)
0.2.3(Dec 18, 2021)
Logpresso Log4j2 Scanner to version 2.3.1

Scan log4j version 1

more metrics about the scan

Source code(tar.gz)
Source code(zip)
log4j_scanner-0.2.3.mkp(4.54 MB)
0.1.6(Dec 17, 2021)

Logpresso Log4j2 Scanner to version 2.1.3
Source code(tar.gz)
Source code(zip)
log4j_scanner-0.1.6.mkp(4.48 MB)
0.1.5(Dec 17, 2021)

Logpresso Log4j2 Scanner to version 2.1.0
Source code(tar.gz)
Source code(zip)
log4j_scanner-0.1.5.mkp(4.48 MB)
0.1.4(Dec 17, 2021)

Logpresso Log4j2 Scanner version 1.7.0
Source code(tar.gz)
Source code(zip)
log4j_scanner-0.1.4.mkp(4.52 MB)
0.1.3(Dec 16, 2021)

Source code(tar.gz)
Source code(zip)
log4j_scanner-0.1.3.mkp(4.46 MB)
0.1.2(Dec 16, 2021)

Update Logpresso Log4j2 Scanner to version 1.6.3
Source code(tar.gz)
Source code(zip)
log4j_scanner-0.1.2.mkp(4.46 MB)
0.1.1(Dec 16, 2021)

Source code(tar.gz)
Source code(zip)
log4j_scanner-0.1.1.mkp(4.44 MB)

Owner

inett GmbH

GitHub Repository

🐎🖥《赛马娘》（ウマ娘: Pretty Derby）辅助脚本

auto-derby 自动化养马育成结果 Nurturing result 功能支持客户端 DMM （前台）实验性安卓 ADB 连接（后台）开发基于 1080x1920 分辨率团队赛 (Team race) 有胜利确定奖励时吃帕菲日常赛 (Daily race) PvP 活动赛 (Cha

376 Jan 01, 2023

Log4j vuln fuzz/scan with python

Log4jFuzz log4j vuln fuzz/scan USE // it's use localhost udp server to check target vuln. python3 log4jFuzz.py [option] optional arguments: -u URL,

3 Dec 22, 2021

Malware arcane - Scripts and notes on my malware analysis journey

Malware Arcane Repository of notes and scripts I use when doing malware analysis

9 Jun 01, 2022

Chapter 1 of the AWS Cookbook

Chapter 1 - Security Set and export your default region: export AWS_REGION=us-east-1 Set your AWS ACCOUNT ID:: AWS_ACCOUNT_ID=$(aws sts get-caller-ide

30 Nov 27, 2022

S2-062 (CVE-2021-31805) / S2-061 / S2-059 RCE

CVE-2021-31805 Remote code execution S2-062 (CVE-2021-31805) Due to Apache Struts2's incomplete fix for S2-061 (CVE-2020-17530), some tag attributes c

31 Nov 22, 2022

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

TProxer A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF. How • Install • Todo • Join Discord How it works

162 Nov 25, 2022

This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device

f5-waf-enforce-sigs-CVE-2021-44228 This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device Overview This script enforce

5 Mar 31, 2022

A (completely native) python3 wifi brute-force attack using the 100k most common passwords (2021)

wifi-bf [LINUX ONLY] A (completely native) python3 wifi brute-force attack using the 100k most common passwords (2021) This script is purely for educa

20 Nov 12, 2022

HatSploit native powerful payload generation and shellcode injection tool that provides support for common platforms and architectures.

HatVenom HatSploit native powerful payload generation and shellcode injection tool that provides support for common platforms and architectures. Featu

100 Dec 23, 2022

Scans for Log4j versions effected by CVE-2021-44228

Related tags

Overview

check_mkExtension to check for log4j2 CVE-2021-44228

How it works

You might also like...

Log4j command generator: Generate commands for CVE-2021-44228

log4j-tools: CVE-2021-44228 poses a serious threat to a wide range of Java-based applications

A scanner and a proof of sample exploit for log4j RCE CVE-2021-44228

An automated header extensive scanner for detecting log4j RCE CVE-2021-44228

A script to search, scrape and scan for Apache Log4j CVE-2021-44228 affected files using Google dorks

open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability

CVE-2021-44228 log4j 2.x rce漏洞检测工具

PortSwigger Burp Plugin for the Log4j (CVE-2021-44228)

Scans all drives for log4j jar files and gets their version from the manifest

Releases(1.1.1)

1.1.1(Jan 3, 2022)

1.1.0(Dec 23, 2021)

1.0.1(Dec 22, 2021)

1.0.0(Dec 20, 2021)

0.2.4(Dec 20, 2021)

0.2.3(Dec 18, 2021)

0.1.6(Dec 17, 2021)

0.1.5(Dec 17, 2021)

0.1.4(Dec 17, 2021)

0.1.3(Dec 16, 2021)

0.1.2(Dec 16, 2021)

0.1.1(Dec 16, 2021)

Owner

inett GmbH

🐎🖥《赛马娘》（ウマ娘: Pretty Derby）辅助脚本

Log4j vuln fuzz/scan with python

Malware arcane - Scripts and notes on my malware analysis journey

Chapter 1 of the AWS Cookbook

S2-062 (CVE-2021-31805) / S2-061 / S2-059 RCE

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device

A (completely native) python3 wifi brute-force attack using the 100k most common passwords (2021)

HatSploit native powerful payload generation and shellcode injection tool that provides support for common platforms and architectures.

Spring Cloud Gateway < 3.0.7 & < 3.1.1 Code Injection (RCE)

This is a Python program that implements a vacuum cleaner as an Artificial Intelligence.

IDA Pro Python plugin to analyze and annotate Linux kernel alternatives

Trainspotting - Python Dependency Injector based on interface binding

Industry ready custom API payload with an easy format for building Python APIs (Django/Django Rest Framework)

Python lib to automate basic QFT calculations like Wick-contractions.

Herramienta para descargar eventos de Sucuri WAF hacia disco.

This repository will contain python scripts for hackers and pentesters

Update of uncaptcha2 from 2019

Automatic SQL injection and database takeover tool

Python APK Reverser & Patcher Tool

check_mkExtension to check for log4j2 `CVE-2021-44228`