log4shell

Remote command execution vulnerability scanner for Log4j.

log4j / log4shell IoCs from multiple sources put together in one big file (IPs) more coming soon (CVE-2021-44228)

Multithreaded log4j vulnerability scanner using only bash! Tests all JNDI protocols, HTTP GET/POST, and 84 headers.

Log4j Shield - fast ⚡, scalable and easy to use Log4j vulnerability CVE-2021-44228 finder and patcher

Provides deep dependency scanning for vulnerable log4j-core usage in Git repositories.

Log4shell - Multi-Toolkit. Find, Fix & Test possible CVE-2021-44228 vulneraries - provides a complete LOG4SHELL test/attack environment on shell

Bash and PowerShell scripts to scan a local filesystem for Log4j .jar files which could be vulnerable to CVE-2021-44228 aka Log4Shell.

This repo exists to aid hunters in discovering and investigating log4j attacks against their organization.

log4shell (CVE-2021-44228) scanning tool

finding Java executables affected by "Log4Shell" log2j JNDI exploit

A script that automates the steps needed to update the log4j2 binaries in a mule 3.x.x standalone installation. To remedy the log4shell vulnerabilities.

Scan multiple Docker images with Trivy for a specific CVE

Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).

Script for downloading newest log4j jar files and upgrades it on a Linux-system.

APT41 DragonRX adversary-emulation lab with Active Directory, Log4Shell, Zeek, Wazuh, and Elastic telemetry for CTI and detection engineering.

Script for checking log4j version