logging-log4j1 vs tsunami-security-scanner-plugins

logging-log4j1

Apache log4j1 (by apache)

Log4j

DISCONTINUED

Suggest alternative

Edit details

tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins. (by google)

Suggest topics

Source Code

Suggest alternative

Edit details

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

featured

logging-log4j1		tsunami-security-scanner-plugins
	Project
5	Mentions	1
872	Stars	855
-	Growth	0.6%
0.0	Activity	9.4
over 1 year ago	Latest Commit	2 days ago
Java	Language	Java
Apache License 2.0	License	Apache License 2.0

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

logging-log4j1

Posts with mentions or reviews of logging-log4j1. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-12-11.

CrowdSec is now able to detect and mitigate log4j CVE-2021-44228
1 project | /r/cybersecurity | 13 Dec 2021

a check against all repos listed under https://github.com/apache/log4j/network/dependents is more effective in finding all effected.
Zero-Day RCE Vulnerability CVE-2021-44228 aka Log4Shell: What We Know So Far
3 projects | /r/cybersecurity | 11 Dec 2021

why not try testing against all repos listed here: https://github.com/apache/log4j/network/dependents ?
2021-12-10 - Cool Query Friday - Hunting Apache Log4j CVE-2021-44228 (Log4Shell)
4 projects | /r/crowdstrike | 10 Dec 2021
Log4j RCE Found
32 projects | news.ycombinator.com | 9 Dec 2021

tsunami-security-scanner-plugins

Posts with mentions or reviews of tsunami-security-scanner-plugins. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-12-09.

Log4j RCE Found
32 projects | news.ycombinator.com | 9 Dec 2021

If you'd like to detect whether you're affected by this dynamically, it looks like https://github.com/google/tsunami-security-scanner-plugins/i... will eventually make it into Google's dynamic scanner:

What are some alternatives?

When comparing logging-log4j1 and tsunami-security-scanner-plugins you can also consider the following projects:

Apache Log4j 2 - Apache Log4j 2 is a versatile, feature-rich, efficient logging API and backend for Java.

GHSA-jfh8-c2jp-5v3q

tsunami-security-scanner - Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

jdk8u - https://wiki.openjdk.org/display/jdk8u

Logback - The reliable, generic, fast and flexible logging framework for Java.

active-scan-plus-plus - ActiveScan++ Burp Suite Plugin

semgrep - Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

lunasec - LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

jdk8u_jdk

marshalsec

nuclei-templates - Community curated list of templates for the nuclei engine to find security vulnerabilities.