log4jscanner

command module
v0.5.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jan 17, 2022 License: Apache-2.0 Imports: 10 Imported by: 0

README

log4jscanner

Go Reference

A minor fork of https://github.com/google/log4jscanner

Changes

  • The scanner won't detect patched version 2.12.2+ and 2.3.1+
  • The scanner scan all local disks if no argument is given
  • The scanner checks .par, .sar , .kar
  • The scanner will output to stdout the result as CSV with the following format:

"hostname","path","version"

Installing

Pre-compiled binaries are available as [release assets][releases].

To install from source with an existing [Go][go] v1.17+ installation, either use [go install][go-install]:

go install github.com/nikaiw/log4jscanner@latest

Or build from the repo directly:

git clone https://github.com/nikaiw/log4jscanner.git
cd log4jscanner
go build -o log4jscanner

Documentation

Overview

The log4jscanner tool scans a set of directories for log4j vulnerable JARs.

Directories

Path Synopsis
The parse tool demonstrates how to use the Parse API.
The parse tool demonstrates how to use the Parse API.
Package jar implements JAR scanning capabilities for log4j.
Package jar implements JAR scanning capabilities for log4j.
third_party
zip
Package zip contains a fork of archive/zip reader.
Package zip contains a fork of archive/zip reader.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL