Log4J Network Scanning/Detection on a 100k+ Node Network

• nuclei

  17 17,234 9.8 Go

  Fast and customizable vulnerability scanner based on simple YAML based DSL.

  

Check out Nuclei (https://github.com/projectdiscovery/nuclei)

• CVE-2021-44228_scanner

  13 346 1.8 PowerShell

  Scanners for Jar files that may be vulnerable to CVE-2021-44228

  

The last scanner type is looking for the classes. Carnegie Mellon’s CERTCC released one that is referenced by CISA: https://github.com/CERTCC/CVE-2021-44228_scanner that look for class names and some fingerprints. Then there is a scanner written in Go that checks for the vulnerable class files and their hashes (inside JARs, WARs,EARs, and zips). https://github.com/hillu/local-log4j-vuln-scanner

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• local-log4j-vuln-scanner

  10 381 1.8 Go

  Simple local scanner for vulnerable log4j instances

The last scanner type is looking for the classes. Carnegie Mellon’s CERTCC released one that is referenced by CISA: https://github.com/CERTCC/CVE-2021-44228_scanner that look for class names and some fingerprints. Then there is a scanner written in Go that checks for the vulnerable class files and their hashes (inside JARs, WARs,EARs, and zips). https://github.com/hillu/local-log4j-vuln-scanner

Suggest a related project