Question about scan4log4shell HOT 9 CLOSED

I added the possibility to add targets over stdin.

$ cat target.txt | ./scan4log4shell remote url

or

$ crawler | ./scan4log4shell remote url

Unfortunately, the program does not have its own crawler

from scan4log4shell.

The scanner does not stop. All targets are always scanned.

Various catchers (TCP, DNS, LDAP) are included. Burp is not yet supported. But you can easily extend it:

from scan4log4shell.

also, is it possible to scan a text file with multiple URL addresses? i.e scan4log4shell remote urls.txt

Cheers

from scan4log4shell.

Hi,

That’s great, we can copy and paste on the target.txt file the URLs from Burp. Thank you very much.

Cheers

from scan4log4shell.

it seems it can't stand these commands

cat targets.txt | scan4log4shell remote url 
requires at least 1 arg(s), only received 0

cat targets.txt | scan4log4shell remote

from scan4log4shell.

Are you using the correct version v1.2.0?

from scan4log4shell.

Oh, I'm really sorry, it seems I was using the old version. my bad!

Thanks

from scan4log4shell.

Works like a charm now!

btw, last question, if the list of url addresses I scan is large, when the scanner finds a vulnerability does it stop or will it report them at the end when it finishes scanning?

from scan4log4shell.

or there is the option instead of interactsh to use Burp collaborator and then we see in real time when it finds an interaction?

from scan4log4shell.