Логотип Logpresso

log4j2-scan — это единый бинарный инструмент командной строки для сканирования уязвимости CVE-2021-44228 и применения патча. Он также поддерживает сканирование и исправление вложенных JAR-файлов. Кроме того, он обнаруживает уязвимости CVE-2021-45046 (log4j 2.15.0), CVE-2021-45105 (log4j 2.16.0), CVE-2021-44832 (log4j 2.17.0), CVE-2021-4104, CVE-2019-17571, CVE-2017-5645, CVE-2020-9488, CVE-2022-23302, CVE-2022-23305, CVE-2022-23307 (log4j 1.x) и CVE-2021-42550 (logback 0.9-1.2.7).

Управление рисками Log4j

Вы можете интегрировать log4j2-scan с сервисом Logpresso Watch для отчётности и управления исправлениями. Подробнее на https://logpresso.watch.

Загрузка

log4j2-scan 3.0.1 (Windows x64, 7z)
log4j2-scan 3.0.1 (Windows x64, zip)
- Если возникает ошибка VCRUNTIME140.dll not found, установите Visual C++ Redistributable.
- Если нативный исполняемый файл не работает, используйте JAR-версию. 32-битная версия не поддерживается.
- 7zip доступен на www.7zip.org, это открытое и бесплатное ПО.

Logpresso CVE-2021-44228 Vulnerability Scanner 3.0.1 (2022-02-13) Usage: log4j2-scan [--scan-log4j1] [--fix] target_path1 target_path2 -f [config_file_path] Specify config file path which contains scan target paths. Paths should be separated by new line. Prepend # for comment. --scan-log4j1 Enables scanning for log4j 1 versions. --scan-logback Enables scanning for logback CVE-2021-42550. --scan-zip Scan also .zip extension files. This option may slow down scanning. --zip-charset Specify an alternate zip encoding other than utf-8. System default charset is used if not specified. --fix Backup original file and remove JndiLookup.class from JAR recursively. With --scan-log4j1 option, it also removes JMSAppender.class, SocketServer.class, SMTPAppender.class, SMTPAppender$1.class, JMSSink.class, JDBCAppender.class, and all classes of org.apache.log4j.chainsaw package --force-fix Do not prompt confirmation. Don't use this option unless you know what you are doing. --restore [backup_file_path] Unfix JAR files using zip archived file. --backup-path [zip_output_path] Specify backup file path. --backup-ext [zip] Specify backup file extension. zip by default. If --backup-path is specified, this option is ignored. --all-drives Scan all drives on Windows --drives c,d Scan specified drives on Windows. Spaces are not allowed here. --no-symlink Do not detect symlink as vulnerable file. --exclude [path_prefix] Path prefixes of directories whose absolute path starts with the specified value will be excluded. Does not support relative paths. You can specify multiple --exclude [path_prefix] pairs --exclude-config [config_file_path] Specify exclude path prefix list in text file. Paths should be separated by new line. Prepend # for comment. --exclude-pattern [pattern] Exclude specified paths of directories by pattern. Supports fragments. You can specify multiple --exclude-pattern [pattern] pairs (non regex) --exclude-file-config [config_file_path] Specify exclude file path list in text file. Paths should be separated by new line. Prepend # for comment. --exclude-fs nfs,tmpfs Exclude paths by file system type. nfs, nfs3, nfs4, afs, cifs, autofs, tmpfs, devtmpfs, fuse.sshfs, smbfs and iso9660 is ignored by default. --api-key [key] Send reports to Logpresso Watch service. --http-proxy [addr:port] Send reports via specified HTTP proxy server. --syslog-udp [host:port] Send reports to remote syslog host. Send vulnerable, potentially vulnerable, and mitigated reports by default. --syslog-level [level] Send reports only if report is higher or equal to specified level. Specify alert for vulnerable and potentially vulnerable reports. Specify info for vulnerable, potentially vulnerable, and mitigated reports. Specify debug for vulnerable, potentially vulnerable, mitigated, and error reports. --syslog-facility [code] Default value is 16 (LOCAL0). Facility value must be in the range of 0 to 23 inclusive. --rfc5424 Follow RFC5424 The Syslog Protocol strictly. --report-csv Generate log4j2_scan_report_yyyyMMdd_HHmmss.csv in working directory if not specified otherwise via --report-path [path] --report-json Generate log4j2_scan_report_yyyyMMdd_HHmmss.json in working directory if not specified otherwise via --report-path [path] --report-patch Report also patched log4j file. --report-path Specify report output path including filename. Implies --report-csv. --report-dir Specify report output directory. Implies --report-csv. --no-empty-report Do not generate empty report. --csv-log-path Specify csv log file path. If log file exists, log will be appended. --json-log-path Specify json log file path. If log file exists, log will be appended. --old-exit-code Return sum of vulnerable and potentially vulnerable files as exit code. --debug Print exception stacktrace for debugging. --trace Print all directories and files while scanning. --silent Do not print progress message. --throttle Limit scan files per second. --help Print this help.

CVE-2021-44228-Scanner

Популярное

Сборка

Использование

Как это работает

Код завершения для автоматизации

Интеграции с инструментами

Контакты

О Logpresso