Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
inspec-log4j — An Inspec profile to check for Log4j CVE-2021-44228 and CVE-2021-45046 | Kitploit
Tools/GitHubGitHub/trickyearlobe/inspec-log4j
Vulnerability ScannersVulnerability AnalysisConfiguration AuditingCloud SecurityDevSecOps
GitHubtrickyearlobe/inspec-log4j

inspec-log4j

An Inspec profile to check for Log4j CVE-2021-44228 and CVE-2021-45046

View Repository
114 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

inspec-log4j

This profile scans for vulnerable versions of Log4j Core JAR files directly on the file system, and embedded in WAR files.

Running the profile locally

root@kitploit:~
git clone https://github.com/trickyearlobe/inspec-log4j
inspec exec inspec-log4j

Running the profile against a remote SSH target

Ensure you have SSH keys loaded for a privileged user (such as root) on the target. Alternatively, check the CLI docs to see how to use Inspec with SUDO

root@kitploit:~
git clone https://github.com/trickyearlobe/inspec-log4j
inspec exec inspec-log4j -t ssh://root@host

Packaging the profile for upload to Chef Automate

root@kitploit:~
git clone https://github.com/trickyearlobe/inspec-log4j
inspec archive inspec-log4j
Download Tool