Powershell Script to check for Log4j Vulnerability

• CVE-2021-44228-Log4Shell-Hashes

  11 153 0.0

  Hashes for vulnerable LOG4J versions

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 $vulnerablesums = -split $(Invoke-WebRequest https://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes/raw/main/sha256sums.txt -UseBasicParsing).content | ? {$_.length -eq 64} $localsums = $Null $DriveList = (Get-PSDrive -PSProvider FileSystem).Root ForEach($Drive In $DriveList) { $localfile=(get-childitem $Drive log4j*.jar -file -Recurse -erroraction silentlycontinue | Get-ItemProperty).DirectoryName $localsums=(get-childitem $Drive log4j*.jar -file -Recurse -erroraction silentlycontinue | Get-FileHash).hash ($localsums -and (compare-object -ReferenceObject $vulnerablesums -DifferenceObject $localsums -IncludeEqual -ErrorAction SilentlyContinue).SideIndicator -eq "==") Write-Host $localfile }

• CVE-2021-44228_scanner

  13 346 1.8 PowerShell

  Scanners for Jar files that may be vulnerable to CVE-2021-44228

  

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• Get-log4j-Windows-local

  2 5 4.1 PowerShell

  Identifying all log4j components across on local windows servers. CVE-2021-44228

Single server, local host: https://github.com/KeysAU/Get-log4j-Windows-local

• Get-log4j-Windows.ps1

  3 7 3.6 PowerShell

  Identifying all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228

Multi serverq, remote hosts https://github.com/KeysAU/Get-log4j-Windows.ps1

Suggest a related project