adilsoybali/log4j-rce-scannerRemote command execution vulnerability scanner for Log4j.
Feature • Requirements • Installation • Usage • Contact
Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses.
If you want to scan with a domain name, you must additionally install subfinder, assetfinder and amass.
git clone https://github.com/adilsoybali/Log4j-RCE-Scanner.gitcd Log4j-RCE-Scannerchmod +x log4j-rce-scanner.sh
./log4j-rce-scanner.sh -h
This will display help for the tool. Here are all the switches it supports.
-h, --help - Display help
-l, --url-list - List of domain/subdomain/ip to be used for scanning.
-d, --domain - The domain name to which all subdomains and itself will be checked.
-b, --burpcollabid - Burp collabrator client id address or interactsh domain address.
Example uses:
./log4j-rce-scanner.sh -l httpxsubdomains.txt -b yrt45r4sjyoj19617jem5briio3cs.burpcollaborator.net
./log4j-rce-scanner.sh -d adilsoybali.com -b yrt45r4sjyoj19617jem5briio3cs.burpcollaborator.net
Click here to go to Burp collaborator documentation page.
Click here to go to Interactsh.
If the domain is vulnerable, dns callbacks with the vulnerable domain name is sent to the burp collaborator or interactsh address you provided.
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!
git checkout -b feature/AmazingFeature)git commit -m 'Add some AmazingFeature')git push origin feature/AmazingFeature)
