local-log4j-vuln-scanner
Simple local scanner for vulnerable log4j instances (by hillu)
PatchAgainstLog4Shell
This is for patching against Log4Shell in Windows via Powershell (by SkeletonMan03)
| local-log4j-vuln-scanner | PatchAgainstLog4Shell | |
|---|---|---|
| 10 | 2 | |
| 381 | 7 | |
| - | - | |
| 1.8 | 0.0 | |
| almost 2 years ago | over 2 years ago | |
| Go | PowerShell | |
| GNU General Public License v3.0 only | GNU General Public License v3.0 only |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
local-log4j-vuln-scanner
Posts with mentions or reviews of local-log4j-vuln-scanner.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-01-08.
-
Log4J Network Scanning/Detection on a 100k+ Node Network
The last scanner type is looking for the classes. Carnegie Mellon’s CERTCC released one that is referenced by CISA: https://github.com/CERTCC/CVE-2021-44228_scanner that look for class names and some fingerprints. Then there is a scanner written in Go that checks for the vulnerable class files and their hashes (inside JARs, WARs,EARs, and zips). https://github.com/hillu/local-log4j-vuln-scanner
-
Log4jscanner by Google
I have been scanning with https://github.com/hillu/local-log4j-vuln-scanner and that problem was resolved in there.
-
So how exactly is Log4j supposed to be patched/mitigated on Windows?
If you want to scan your system for vulnerable log4j instances, https://github.com/hillu/local-log4j-vuln-scanner has binaries and is constantly updated
-
All log4j detection tools fail these cases - be careful
We are using this local log4j scanner: https://github.com/hillu/local-log4j-vuln-scanner/
-
Cisco AMP/Endpoint is not a great product for Endpoint Security.
https://github.com/hillu/local-log4j-vuln-scanner - Nope
- Vulnerabilidade Log4j
-
Can PDQ be used to scan for log4j usage?
Log4j may be included in other jars, so a recursive ps scan like https://github.com/hillu/local-log4j-vuln-scanner may come to rescue
-
Any mitigations in the works for the log4j critical CVE?
The scanner provided by https://github.com/hillu/local-log4j-vuln-scanner gives us the following output when using "/opt/qradar/" as directory.
- Log4j 0day being exploited
PatchAgainstLog4Shell
Posts with mentions or reviews of PatchAgainstLog4Shell.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-12-18.
-
Log4j in tough to see places?
Powershell maybe? https://github.com/SkeletonMan03/PatchAgainstLog4Shell
-
So how exactly is Log4j supposed to be patched/mitigated on Windows?
I published a Powershell script to make finding and patching against Log4Shell easier on Windows systems. I hope it can help you, OP. Patch Against Log4Shell
What are some alternatives?
When comparing local-log4j-vuln-scanner and PatchAgainstLog4Shell you can also consider the following projects:
tfsec - Security scanner for your Terraform code
incidentresponse
log4jscanner - A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.
nse-log4shell - Nmap NSE scripts to check against log4shell or LogJam vulnerabilities (CVE-2021-44228)
CVE-2021-44228-Scanner - Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228
log4jscanwin - Log4j Vulnerability Scanner for Windows
Log4jPatcher - A mitigation for CVE-2021-44228 (log4shell) that works by patching the vulnerability at runtime. (Works with any vulnerable java software, tested with java 6 and newer)
Windowslog4jClassRemover
apache-log4j-poc - Apache Log4j 远程代码执行
Log4j-CVE-Detect - Detections for CVE-2021-44228 inside of nested binaries
log4shell_ioc_ips - log4j / log4shell IoCs from multiple sources put together in one big file (IPs) more coming soon (CVE-2021-44228)
local-log4j-vuln-scanner vs tfsec
PatchAgainstLog4Shell vs incidentresponse
local-log4j-vuln-scanner vs log4jscanner
PatchAgainstLog4Shell vs nse-log4shell
local-log4j-vuln-scanner vs CVE-2021-44228-Scanner
PatchAgainstLog4Shell vs log4jscanwin
local-log4j-vuln-scanner vs Log4jPatcher
local-log4j-vuln-scanner vs nse-log4shell
local-log4j-vuln-scanner vs Windowslog4jClassRemover
local-log4j-vuln-scanner vs apache-log4j-poc
local-log4j-vuln-scanner vs Log4j-CVE-Detect
local-log4j-vuln-scanner vs log4shell_ioc_ips