Alternatives and similar repositories for awesome-log4shell

Users that are interested in awesome-log4shell are comparing it to the libraries listed below

• redhuntlabs / Log4JHunt

  View on GitHub
  An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.
  ☆45Jan 22, 2025Updated last year
• cyberqueenmeg / log4j-bypass

  View on GitHub
  ☆24Jul 31, 2022Updated 3 years ago
• snyk / awesome-snyk-community

  View on GitHub
  Awesome Snyk community contributions, champions, integrations, blogs, tools and more 💜
  ☆48Mar 21, 2022Updated 3 years ago
• byt3hx / gup

  View on GitHub
  gup aka Get All Urls parameters to create wordlists for brute forcing parameters.
  ☆18Dec 4, 2021Updated 4 years ago
• silentsignal / burp-log4shell

  View on GitHub
  Log4Shell scanner for Burp Suite
  ☆486Sep 24, 2023Updated 2 years ago
• zer1t0 / awsenum

  View on GitHub
  Enumerate AWS permissions and resources.
  ☆71Jun 23, 2022Updated 3 years ago
• tomikoski / common-lists

  View on GitHub
  Misc stuff from internet
  ☆12Nov 5, 2025Updated 3 months ago
• NCSC-NL / log4shell

  View on GitHub
  Operational information regarding the log4shell vulnerabilities in the Log4j logging library.
  ☆1,891Jun 15, 2022Updated 3 years ago
• curated-intel / Log4Shell-IOCs

  View on GitHub
  A collection of intelligence about Log4Shell and its exploitation activity.
  ☆184Mar 4, 2022Updated 3 years ago
• TerminalJockey / Kudzu

  View on GitHub
  Kudzu is a Go C2 platform with an emphasis on extensibility.
  ☆12Mar 30, 2021Updated 4 years ago
• lirantal / react-suspended-vulnerable-application

  View on GitHub
  React Suspended is an educational frontend application riddled with security vulnerabilities
  ☆10Jan 29, 2024Updated 2 years ago
• vortexau / cdn

  View on GitHub
  Compiles a list of major CDN and WAF subnets.
  ☆67Feb 7, 2026Updated last week
• Blokje5 / terraform-deployment-pipeline

  View on GitHub
  Repository containing a set of policies for aws resources created with terraform
  ☆12Sep 16, 2019Updated 6 years ago
• GhostTroops / ksubdomain_old

  View on GitHub
  Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second修复内存溢出等bug
  ☆14Nov 25, 2023Updated 2 years ago
• cyberstruggle / L4sh

  View on GitHub
  Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.
  ☆257Dec 21, 2021Updated 4 years ago
• Puliczek / CVE-2021-44228-PoC-log4j-bypass-words

  View on GitHub
  🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
  ☆950Jan 15, 2022Updated 4 years ago
• aalex954 / Log4PowerShell

  View on GitHub
  A Log4j writeup and Docker based PoC written in PowerShell
  ☆76Mar 11, 2024Updated last year
• cedowens / Helpful_aws-scripts

  View on GitHub
  python3 scripts to help with aws triage needs
  ☆15Feb 11, 2022Updated 4 years ago
• juliocarneiro / hacking-tools

  View on GitHub
  A collection of tools for hackers, pentesters & security researchers.
  ☆18Mar 22, 2022Updated 3 years ago
• hosch3n / ProxyVulns

  View on GitHub
  [ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains.…
  ☆178Oct 21, 2022Updated 3 years ago
• dwisiswant0 / look4jar

  View on GitHub
  Looking for JAR files that are vulnerable to Log4j RCE (CVE‐2021‐44228)?
  ☆45Mar 2, 2022Updated 3 years ago
• securibee / Twitter-Seclists

  View on GitHub
  Curated lists of InfoSec on Twitter. Find out who's awesome to follow!
  ☆91Apr 12, 2021Updated 4 years ago
• PalindromeLabs / STEWS

  View on GitHub
  A Security Tool for Enumerating WebSockets
  ☆366Jan 10, 2022Updated 4 years ago
• pimps / JNDI-Exploit-Kit

  View on GitHub
  JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP S…
  ☆937Sep 2, 2025Updated 5 months ago
• blackhatethicalhacking / bheh-sub-pwner

  View on GitHub
  This bash script tool, will perform advanced subdomain enumeration, save the results, it will then probe the subdomains into urls, save t…
  ☆25Sep 6, 2024Updated last year
• christophetd / log4shell-vulnerable-app

  View on GitHub
  Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).
  ☆1,138Apr 26, 2024Updated last year
• rufherg / WebLogic_Basic_Poc

  View on GitHub
  用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库
  ☆94Nov 4, 2020Updated 5 years ago
• haticeerturk / scoper

  View on GitHub
  This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.
  ☆97Jan 2, 2025Updated last year
• pentesterland / Log4Shell

  View on GitHub
  ☆74Jan 5, 2022Updated 4 years ago
• DK9510 / web-app-hacker-s-handbook-notes

  View on GitHub
  My nots from Web application Hacker's Handbook
  ☆18Nov 22, 2021Updated 4 years ago
• lhotari / log4shell-mitigation-tester

  View on GitHub
  Log4Shell CVE-2021-44228 mitigation tester
  ☆16Dec 13, 2021Updated 4 years ago
• hahwul / authz0

  View on GitHub
  🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
  ☆426Dec 5, 2025Updated 2 months ago
• righettod / log4shell-analysis

  View on GitHub
  Contains all my research and content produced regarding the log4shell vulnerability
  ☆31Jan 22, 2022Updated 4 years ago
• honoki / burp-copy-regex-matches

  View on GitHub
  Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.
  ☆35Feb 12, 2022Updated 4 years ago
• DigeeX / raider

  View on GitHub
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆139Sep 14, 2021Updated 4 years ago
• PetrusViet / CVE-2021-39115

  View on GitHub
  Template Injection in Email Templates leads to code execution on Jira Service Management Server
  ☆48Sep 9, 2021Updated 4 years ago
• i2-open / i2scim

  View on GitHub
  Implementation of SCIM
  ☆40Jan 29, 2026Updated 2 weeks ago
• Kirill89 / prototype-pollution-exploits

  View on GitHub
  Prototype Pollution exploits collection
  ☆37Aug 8, 2021Updated 4 years ago
• hahwul / RegexPassive

  View on GitHub
  🔭 Collection of regexp pattern for security passive scanning
  ☆116Feb 18, 2023Updated 2 years ago