apache-log4j-rce-poc vs Log4JShell-Bytecode-Detector

apache-log4j-rce-poc

By udoless

Suggest topics

Source Code

Suggest alternative

Edit details

Log4JShell-Bytecode-Detector

Local Bytecode Scanner for the Log4JShell Vulnerability (CVE-2021-44228) (by CodeShield-Security)

Security cve-2021-44228 log4jshell Log4j2 Scanner Bytecode log4shell

Source Code

codeshield.io

Suggest alternative

Edit details

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

featured

apache-log4j-rce-poc		Log4JShell-Bytecode-Detector
	Project
1	Mentions	4
2	Stars	50
-	Growth	-
0.0	Activity	0.0
over 2 years ago	Latest Commit	about 2 years ago
Java	Language	Java
-	License	MIT License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

apache-log4j-rce-poc

Posts with mentions or reviews of apache-log4j-rce-poc. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-12-09.

RCE 0-day exploit found in log4j, a popular Java logging package
15 projects | /r/netsec | 9 Dec 2021

I published some code with detailed steps 写了下详细的复现步骤 https://github.com/udoless/apache-log4j-rce-poc

Log4JShell-Bytecode-Detector

Posts with mentions or reviews of Log4JShell-Bytecode-Detector. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-12-16.

If you are hunting for log4j vulns, and you are already considering nested .jars..
1 project | /r/sysadmin | 16 Dec 2021
Log4JShell ByteCode Detector
2 projects | dev.to | 16 Dec 2021

To check if your jar file is affected by the critical CVE-2021-44228, we provide an open-source command line tool https://github.com/CodeShield-Security/Log4JShell-Bytecode-Detector. The tool scans the jar file and compares the classses against a set of pre-computed hashes of the vulnerable Log4j classes. Since our tool only uses the hash and fingerprints of bytecode classes, no source code needs to be available.
Zero-Day RCE Vulnerability CVE-2021-44228 aka Log4Shell: What We Know So Far
3 projects | /r/cybersecurity | 11 Dec 2021
RCE 0-day exploit found in log4j, a popular Java logging package
15 projects | /r/netsec | 9 Dec 2021

u/sanitybit My colleagues have written a detector for the vulnerability: https://github.com/CodeShield-Security/Log4JShell-Bytecode-Detector

What are some alternatives?

When comparing apache-log4j-rce-poc and Log4JShell-Bytecode-Detector you can also consider the following projects:

Log4jAttackSurface

semgrep-rules - Semgrep rules registry

active-scan-plus-plus - ActiveScan++ Burp Suite Plugin

apache-log4j-rce-poc

Apache Log4j 2 - Apache Log4j 2 is a versatile, feature-rich, efficient logging API and backend for Java.

CVE-2021-44228-Log4Shell-Hashes - Hashes for vulnerable LOG4J versions

ThreatMapper - Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.

log4j_CVE-2021-44228_tester - Multithreaded log4j vulnerability scanner using only bash! Tests all JNDI protocols, HTTP GET/POST, and 84 headers. [Moved to: https://github.com/ssstonebraker/log4j-scan-turbo]