Skip to content

Instantly share code, notes, and snippets.

@joswr1ght

joswr1ght/logshell-search.sh

Created December 20, 2021 19:56
Show Gist options
  • Save joswr1ght/a6badf9b0b148efadfccbf967fcc2b41 to your computer and use it in GitHub Desktop.
Save joswr1ght/a6badf9b0b148efadfccbf967fcc2b41 to your computer and use it in GitHub Desktop.
Download ZIP
Search for log4shell attack patterns
Raw
logshell-search.sh
#!/bin/sh
# Specify a starting directory as the first command-line argument to search for
# log4shell-style attack patterns.
grep -E -i -r '\$\{jndi:(ldap[s]?|rmi|dns):/[^\n]+' $1
@cruggieri114
Copy link

Any plans to make that log4j2-scan tool public? Seems too handy of a tool not too :D

@joswr1ght
Copy link
Author

The elves share the link in the North Pole, and it is available here: https://github.com/logpresso/CVE-2021-44228-Scanner Thank you!

@cruggieri114
Copy link

How did I miss that? Thanks, man! Not just for the link, but for everything you all have done for the HHC! Awesome as always.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment