Exploit for Improper Input Validation in Apache Log4J. Repository with altered scripts related to CVE-2021-44228 ported to EDR environments. Scripts modified for compatibility with additional technologies' requirements. Palo Alto's Cortex XDR scripts rendered compatible by implementing incompatible Python modules and exposing an `xdr` entry point. Documentation of the `xdr` function's expected input and outputs can be found in each script. Two scripts to scan the filesystem for Log4j2 files vulnerable to Log4Shell (CVE-2021-44228) and check for exploitation attempts in local log files
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo