Giter VIP home page Giter VIP logo

nmap-log4shell's Introduction

GitHub Twitter LinkedIn

nmap-log4shell's People

Contributors

giterlizzi avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar

nmap-log4shell's Issues

Module stringaux not found for Centos 7 nmap default installation version

Module stringaux not found error in Centos 7.

Steps to reproduce

Install nmap:

yum -y install nmap  

Then install and run script:

nmap --script log4shell.nse --script-args log4shell.callback-server=10.111.11.150:1389 -p 8080 10.111.11.149 [vagrant@attack
NSE: Failed to load /usr/bin/../share/nmap/scripts/log4shell.nse:
/usr/bin/../share/nmap/scripts/log4shell.nse:129: module 'stringaux' not found:
        NSE failed to find nselib/stringaux.lua in search paths.
        no field package.preload['stringaux']
        no file '/usr/local/share/lua/5.2/stringaux.lua'
        no file '/usr/local/share/lua/5.2/stringaux/init.lua'
        no file '/usr/local/lib/lua/5.2/stringaux.lua'
        no file '/usr/local/lib/lua/5.2/stringaux/init.lua'
        no file './stringaux.lua'
        no file '/usr/local/lib/lua/5.2/stringaux.so'
        no file '/usr/local/lib/lua/5.2/loadall.so'
        no file './stringaux.so'
stack traceback:
        [C]: in function 'require'
        /usr/bin/../share/nmap/scripts/log4shell.nse:129: in function </usr/bin/../share/nmap/scripts/log4shell.nse:1>
NSE: failed to initialize the script engine:
/usr/bin/../share/nmap/nse_main.lua:547: could not load script
stack traceback:
        [C]: in function 'error'
        /usr/bin/../share/nmap/nse_main.lua:547: in function 'new'
        /usr/bin/../share/nmap/nse_main.lua:783: in function 'get_chosen_scripts'
        /usr/bin/../share/nmap/nse_main.lua:1271: in main chunk
        [C]: in ?

QUITTING!

Centos version

[vagrant@attacker ~]$ cat /etc/os-release
NAME="CentOS Linux"
VERSION="7 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="7"
PRETTY_NAME="CentOS Linux 7 (Core)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:7"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"

CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"

Newbie

Thank you for your time and effort to make cyber world safe. How do I tell in the scan results that the host is vulnerable? Thank you

nmap log4jshell.nse execution

Hi,

First of all, thank you very much for this code. We are able to upload the NSE file in our NMAP.

Now the challenge we are facing right now is how to execute the scan. Based on the README.md, we just need to upload the nse file to our NMAP and do an update. However I am confused on the syntax:

nmap --script log4shell.nse [--script-args log4shell.callback-server=127.0.0.1:1389] [-p ]

  1. Is the callback server the NMAP server we are using?
  2. What is -p port for if we want to scan a server to see what ports are open and if vulnerable with log4j?
  3. Do I also need to download JNDIExploit.zip to our NMAP server so that the command will take effect?
  4. Do you have any sample result using this nse file?

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.