Zero-Day RCE Vulnerability CVE-2021-44228 aka Log4Shell: What We Know So Far

This page summarizes the projects mentioned and recommended in the original post on /r/cybersecurity
Log4j Security cve-2021-44228 log4jshell Log4j2

WorkOS
Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
Our great sponsors

  • log4j_CVE-2021-44228_tester

    Discontinued Multithreaded log4j vulnerability scanner using only bash! Tests all JNDI protocols, HTTP GET/POST, and 84 headers. [Moved to: https://github.com/ssstonebraker/log4j-scan-turbo]

    • Better link

  • logging-log4j1

    Discontinued Apache log4j1

    • why not try testing against all repos listed here: https://github.com/apache/log4j/network/dependents ?

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo

  • Log4JShell-Bytecode-Detector

    Local Bytecode Scanner for the Log4JShell Vulnerability (CVE-2021-44228)

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts