adoptium.net VS ThreatMapper

1.18 requires Java 17. (Java link if you need it)

Note: In order for JarFix to work, you needed add all options when installing Java (Picture).

Did you actually install a Java Development Kit? Because this sounds like you only installed a text editor. You can download it here: https://adoptium.net/ (download the latest version for your OS and install it)

Try this https://adoptium.net/

Make sure you have Java fully installed (select all components when installing). Link to Java download if you need it: (Link)

if you downloaded Java from adoptopenjdk/adoptium/temurin/whatever they call it now, you do have it.

I had the same issue and I fixed it with downloading openjdk 17. you can download it here https://adoptium.net/

Which was recently rebranded as Eclipse Temurin

if they are using Windows, have them reinstall java https://adoptium.net/

e.g https://adoptium.net/

Though the Reddit-Mod war has delivered another excellent find. well several actually, but the one I'm posting now is called "Threat Mapper". Its a security scanner, will a fantastic UI, and works across most infrastructure... including VMs, Containers and the main Cloud Providers..

https://github.com/deepfence/ThreatMapper

If you like Wiz.io but don't have a million dollars or so lying around, I'm finding the community edition of Deepfence (https://deepfence.io/) pretty good.

Magpie https://github.com/openraven/magpie ThreatMapper https://github.com/deepfence/ThreatMapper Cloudquery https://github.com/cloudquery/cloudquery

Company: https://deepfence.io

And deepfence.imo for vurnalbility scans https://github.com/deepfence/ThreatMapper

ThreatMapper is an option for your team member, particularly if you're looking to scan Kubernetes or Fargate environments as the installation is very easy. It's a little more complex for hosts (you need to install a docker runtime on each to run the sensor locally), but should be worth any additional trouble. The GUI gives you a map of workloads, traffic flows, vulnerabilities found on each workload and host, and which are highest risk.

Full disclosure - I work for an open source project called ThreatMapper that performs run-time vulnerability scanning and anything you say might be used to make the project better - thank you!