An Awesome List of Log4Shell resources to help you stay informed and secure! π
β231Aug 25, 2022Updated 4 years ago
Alternatives and similar repositories for awesome-log4shell
Users that are interested in awesome-log4shell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- β24Jul 31, 2022Updated 4 years ago
- An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.β47Jan 22, 2025Updated last year
- Log4Shell scanner for Burp Suiteβ487Sep 24, 2023Updated 3 years ago
- Mitigations (AWS WAF, Lambda@Edge/CloudFront Functions) to implement on AWS to attempt to prevent log4j exploitation.β22Dec 19, 2021Updated 4 years ago
- Compiles a list of major CDN and WAF subnets.β68Updated this week
- Managed Database hosting by DigitalOcean β’ AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Operational information regarding the log4shell vulnerabilities in the Log4j logging library.β1,882Jun 15, 2022Updated 4 years ago
- gup aka Get All Urls parameters to create wordlists for brute forcing parameters.β18Dec 4, 2021Updated 4 years ago
- Looking for JAR files that are vulnerable to Log4j RCE (CVEβ2021β44228)?β44Mar 2, 2022Updated 4 years ago
- Recon scripts for bug huntingβ10Nov 19, 2021Updated 4 years ago
- π Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.β429Oct 14, 2026Updated 2 weeks ago
- A collection of intelligence about Log4Shell and its exploitation activity.β181Mar 4, 2022Updated 4 years ago
- [ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains.β¦β176Oct 21, 2022Updated 4 years ago
- Generate a dynamic PAC script that will route traffic to your Burp proxy only if it matches the scope defined in your Burp target.β34Nov 8, 2021Updated 4 years ago
- π±βπ» βοΈ π€¬ CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricksβ952Jan 15, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer β’ AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Enumerate AWS permissions and resources.β73Jun 23, 2022Updated 4 years ago
- Repository containing a set of policies for aws resources created with terraformβ11Sep 16, 2019Updated 7 years ago
- Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).β1,144Apr 26, 2024Updated 2 years ago
- JNDI-Exploitation-KitοΌA modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Sβ¦β946Sep 2, 2025Updated last year
- A Security Tool for Enumerating WebSocketsβ383Jan 10, 2022Updated 4 years ago
- Public testing data. Samples of log4j library versions to help log4j scanners / detectors improve their accuracy for detecting CVE-2021-β¦β14Dec 30, 2021Updated 4 years ago
- β12Dec 26, 2021Updated 4 years ago
- Scripts to aid analysis of files obfuscated with ScatterBee.β25Jan 6, 2023Updated 3 years ago
- python3 scripts to help with aws triage needsβ14Feb 11, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off β’ AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A step by step workshop to exploit various vulnerabilities in Node.js and Java applicationsβ156Mar 17, 2024Updated 2 years ago
- Vulnerability scanner for Spring4Shell (CVE-2022-22965)β12Apr 7, 2022Updated 4 years ago
- GraphQL security auditing script with a focus on performing batch GraphQL queries and mutationsβ426Dec 24, 2022Updated 3 years ago
- A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.β396Oct 20, 2026Updated last week
- Repo with files used in https://cmrodriguez.me/blog/nsc-bypass-2/β10Jan 26, 2021Updated 5 years ago
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.β97Jan 2, 2025Updated last year
- A script that checks for vulnerable Log4j (CVE-2021-44228) systems using injection of the payload in common HTTP headers.β127Dec 14, 2021Updated 4 years ago
- Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.β35Feb 12, 2022Updated 4 years ago
- A collection of one off hacks and simple scriptsβ27Mar 21, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer β’ AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- cvet is a Python utility for pulling actionable vulnerabilities from cvetrends.comβ41Aug 30, 2022Updated 4 years ago
- η¨δΊWebLogic pocεexpζ΅θ―ηεΊη‘θζ¬οΌεη»ε°ιζεηζ¬pocεΊβ95Nov 4, 2020Updated 5 years ago
- Unofficial documentation for the great tool Param Minerβ186Aug 21, 2022Updated 4 years ago
- β77Jan 5, 2022Updated 4 years ago
- π Collection of regexp pattern for security passive scanningβ116Feb 18, 2023Updated 3 years ago
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to β¦β124Apr 10, 2024Updated 2 years ago
- Fetch the details of assets hosted on AWS.β89Dec 4, 2023Updated 2 years ago