Log-4j-scanner

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

log4j-Scan-Burpsuite

log4j-Scan-Burpsuite Burpsuite detection plugin for Log4j vulnerability CVE-2021-44228 Includes ON/OFF switch, Filter, Send Features: Automatically replace request headers Automatically replace POST request application/json parameters Automatically replace POST request application/x-www-urlencode...

Log4j_scan_Advance

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

log4j-scan

1 Usage Instructions CVE-2021-44228 log4j 2.x rce vulnerability detection tool, sends GET requests to the target URL and uses DNSlog to check for responses. $ python3 log4j-scan.py -h Usage: python log4j-scan.py -u Options: -h, --help show this help message and exit -u URL, --url=URL 输入需要检查的链接，如:...

log4j-scan

log4j-scan Un escáner totalmente automatizado, preciso y exhaustivo para encontrar hosts vulnerables a log4j Características Soporte para listas de URLs. Fuzzing en más de 60 cabeceras HTTP de solicitud no solo 3-4 cabeceras como en herramientas anteriores. Fuzzing en parámetros de datos POST HTT...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

It is an offensive tool for Log4j RCE CVE-2021-44228 vulnerability scanning. The primary CVE ID is CVE-2021-44228. The target product/service is Apache Log4j. The vulnerability class/vector is RCE Remote Code Execution. The probable entry points are scripts/modules such as log4j-scan.py. Notable...