Well it's Log4J Patch Day. Again. (2.17 now available to fix infinite recursion bug)

• log4j-finder

  2 435 0.0 Python

  Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

  

I customized a copy of log4j-finder a bit and we used it to scan Linux and Windows machines pretty quickly.

• CVE-2021-44228-Scanner

  17 854 0.0 Java

  Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

  

Peculiarly Dell for some of their data protection products also seems to advice to use a 3rd party scan tool to mitigate against certain issues in <2.14 and 2.15 log4j using log4j-scan from Logpresso https://github.com/logpresso/CVE-2021-44228-Scanner, as far as I can see a Korean company? Would have imagined Dell would also have some developers being able to write something? But that's just me...

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project