log4shell-tool
log4shell-tool copied to clipboard
datto
Log4Shell Enumeration, Mitigation and Attack Detection Tool
This is an edited version of the Log4Shell solution to omit the YARA and Luna scan with a parameter option.
Realized I had the '! Alert:' in one step too high, so during this I added a new message in the section where we are verifying the Jndilookup.class file for...
No matter what I do I cannot get this to run. Thank you guys for releasing this tool to others but I've installed every C++ library (located here: https://docs.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170) but...
Just a heads up, logging events in IIS logs etc. after vulnerability scanning are triggering Infection Alerts on this script. We determined and correlated the sources from our 3rd party...
Hi there, old friends :) To make a recommendation: when people are using this tool, not all of them are understanding what the output of this tool means. As log4shell...
Getting this error when running the script. Please help identify which C++ is required. The Visual C++ Redistributable is required in order to use YARA
im running this via ps but when I run it I get the below error without asking what option I want to run: ``` PS D:\log4j> .\scanner-8b.ps1 Log4j/Log4Shell CVE-2021-44228 Scanning/Mitigation...
Add a param block similar to the following: ```powershell [CmdletBinding()] param ( [Parameter(Mandatory=$false)][int]$usrScanscope = $env:usrScanscope, [Parameter(Mandatory=$false)][bool]$usrUpdateDefs = $env:usrUpdateDefs, [Parameter(Mandatory=$false)][char]$usrMitigate = $env:usrMitigate ) ``` Use this to get the location of...
When executing the script from a directory that the script is not present in it fails the checks for Yara32.exe and Yara64.exe as the script is checking the directory the...
I am getting a failure running this on some devices using Datto RMM, in the stderr I just get the message Log4Shell Enumeration, Mitigation and Attack Detection Tool [WIN] Object...
