adilsoybali / log4j-rce-scanner Goto Github PK

View Code? Open in Web Editor NEW

254.0 9.0 55.0 42 KB

Remote command execution vulnerability scanner for Log4j.

License: GNU General Public License v3.0

Shell 100.00%

cve-2021-44228 log4j log4j2 rce scanner checker vulnerability-scanners log4shell

log4j-rce-scanner's Introduction

Feature • Requirements • Installation • Usage • Contact

RCE scanner for Log4j

Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses.

Affected versions < 2.15.0

Features

It can scan according to the url list you provide.
It can scan all of them by finding the subdomains of the domain name you give.
It adds the source domain as a prefix to determine from which source the incoming dns queries are coming from.

Requirements

httpx
curl

If you want to scan with a domain name, you must additionally install subfinder, assetfinder and amass.

Installation

git clone https://github.com/adilsoybali/Log4j-RCE-Scanner.git
cd Log4j-RCE-Scanner
chmod +x log4j-rce-scanner.sh

Usage

./log4j-rce-scanner.sh -h

This will display help for the tool. Here are all the switches it supports.

-h, --help - Display help
-l, --url-list - List of domain/subdomain/ip to be used for scanning.
-d, --domain - The domain name to which all subdomains and itself will be checked.
-b, --burpcollabid - Burp collabrator client id address or interactsh domain address.

Example uses:
./log4j-rce-scanner.sh -l httpxsubdomains.txt -b yrt45r4sjyoj19617jem5briio3cs.burpcollaborator.net
./log4j-rce-scanner.sh -d adilsoybali.com -b yrt45r4sjyoj19617jem5briio3cs.burpcollaborator.net

Click here to go to Burp collaborator documentation page.

Click here to go to Interactsh.

If the domain is vulnerable, dns callbacks with the vulnerable domain name is sent to the burp collaborator or interactsh address you provided.

Contributing

Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.

If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!

Fork the Project
Create your Feature Branch (git checkout -b feature/AmazingFeature)
Commit your Changes (git commit -m 'Add some AmazingFeature')
Push to the Branch (git push origin feature/AmazingFeature)
Open a Pull Request

Contact

Acknowledgments

Stargazers over time

log4j-rce-scanner's People

Contributors

Stargazers

Watchers

log4j-rce-scanner's Issues

requirements issue

i installed amass but it's showing error that amass is not installed.

[Request] Display Positive or Negative Results at end of Scanning

Is your feature request related to a problem? Please describe.
When I run the scanner, I do not see any indication at the end of its run whether the tests were positive or negative. It just returns to the prompt.

Describe the solution you'd like
I would like to see a statement at the end of the scanner's execution indicating if there were any positive or negative results, according to the domain(s) being tested.

Describe alternatives you've considered
I have looked at other tools, example - fullhunt.io's scanner which does indicate a positive or negative result

Additional context
Add any other context or screenshots about the feature request here.

Httpx failing

Is your feature request related to a problem? Please describe.
When running log4j scan httpx sends error

Example:
./log4j-rce-scanner.sh -l ip.txt -b t

Usage: httpx [OPTIONS] URL

Error: No such option: -s

Describe the solution you'd like
Change so it doesn't run with -s?

Describe alternatives you've considered
N/A

Additional context
Nothing

Dependency Checks

Is your feature request related to a problem? Please describe.
clone and run doesn't work for -d option.

Example:
./log4j-rce-scanner.sh -d url.com -b 0

Subfinder is working

./log4j-rce-scanner.sh: line 35: subfinder: command not found

Assetfinder is working

./log4j-rce-scanner.sh: line 35: assetfinder: command not found

Amass is working

./log4j-rce-scanner.sh: line 35: amass: command not found
./log4j-rce-scanner.sh: line 35: httpx: command not found

Describe the solution you'd like
If I use -d for domains it needs to check that I have the dependent projects installed. It really needs to spit out what I should do to make this work. Better yet include dependencies in the first place!