log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.
☆1,278Dec 6, 2022Updated 3 years ago
Alternatives and similar repositories for log4j-scanner
Users that are interested in log4j-scanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228☆3,425Nov 23, 2022Updated 3 years ago
- A community sourced list of log4j-affected software☆1,118Nov 9, 2022Updated 3 years ago
- Scanners for Jar files that may be vulnerable to CVE-2021-44228☆352Mar 23, 2022Updated 4 years ago
- A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.☆1,562Jun 30, 2022Updated 4 years ago
- Operational information regarding the log4shell vulnerabilities in the Log4j logging library.☆1,882Jun 15, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Hashes for vulnerable LOG4J versions☆154Dec 17, 2021Updated 4 years ago
- A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities☆654Apr 7, 2022Updated 4 years ago
- Log4Shell scanner for Burp Suite☆487Sep 24, 2023Updated 3 years ago
- Detector for Log4Shell exploitation attempts☆724Feb 12, 2022Updated 4 years ago
- A Proof-Of-Concept for the CVE-2021-44228 vulnerability.☆1,847Feb 12, 2024Updated 2 years ago
- JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP S…☆946Sep 2, 2025Updated last year
- A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.☆396Updated this week
- Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).☆1,144Apr 26, 2024Updated 2 years ago
- ☆2,072Dec 13, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.☆1,416Dec 16, 2021Updated 4 years ago
- log4jScanner provides the ability to scan internal subnets for vulnerable log4j web services☆489Feb 25, 2023Updated 3 years ago
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆872Jan 20, 2022Updated 4 years ago
- Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user☆1,071Jul 10, 2022Updated 4 years ago
- Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)☆439Dec 27, 2022Updated 3 years ago
- Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228☆863Apr 7, 2022Updated 4 years ago
- PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs☆291Dec 21, 2021Updated 4 years ago
- Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabl…☆32,295Updated this week
- A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.☆6,783May 27, 2026Updated 4 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- NMAP Vulnerability Scanning Scripts☆621Mar 4, 2022Updated 4 years ago
- Gather and update all available and newest CVEs with their PoC.☆8,158Oct 16, 2026Updated last week
- Azure Security Resources and Notes☆1,785Feb 17, 2026Updated 8 months ago
- a drop-in replacement for Nmap powered by shodan.io☆3,312Aug 15, 2026Updated 2 months ago
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,698Oct 14, 2026Updated last week
- Community curated list of templates for the nuclei engine to find security vulnerabilities.☆13,219Updated this week
- An OOB interaction gathering server and client library☆4,602Updated this week
- Small and highly portable detection tests based on MITRE's ATT&CK.☆12,722Updated this week
- A malicious LDAP server for JNDI injection attacks☆1,090Sep 28, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- linWinPwn is a bash script that streamlines the use of a number of Active Directory tools☆2,227Sep 30, 2026Updated 3 weeks ago
- Six Degrees of Domain Admin☆10,621Mar 2, 2026Updated 7 months ago
- Quickly discover exposed hosts on the internet using multiple search engines.☆3,092Updated this week
- RedEye is a visual analytic tool supporting Red & Blue Team operations☆2,773Oct 20, 2023Updated 3 years ago
- Impacket is a collection of Python classes for working with network protocols.☆16,192Updated this week
- One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️☆6,805Sep 27, 2026Updated 3 weeks ago
- Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 en…☆1,432Dec 27, 2022Updated 3 years ago