CVE-2021-44228 PoC — Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Source

Associated Vulnerability

Description

A script to search, scrape and scan for Apache Log4j CVE-2021-44228 affected files using Google dorks

Readme

# Log4j dork scanner
This is an auto script to search, scrape and scan for Apache Log4j CVE-2021-44228 affected files using Google dorks.

- ### Installation:
```shell
git clone https://github.com/JagarYousef/log4j-dork-scanner
cd  log4j-dork-scanner
pip install -r requirments.txt
```

- ### Scanning:
```shell
 python scanner.py -d YOUR_SEARCH_DORK -n NUMBER_OF_GOOGLE_RESULTS_PAGES
```
- ### Example:
```shell
python scanner.py -d inurl:member.jsp -n 10
```
<br>

### Disclaimer 
- I am not responsible about how you use it, I just provide it for educational and demonstration purposes!
- I don't provide support on it, you can fork it as you want

File Snapshot

 [4.0K]  /data/pocs/d44da07adab727e34198d5c860ff40ef5575b14c
├── [ 17K]  headers-large.txt
├── [ 951]  headers.txt
├── [ 15K]  log4j-scan.py
├── [ 650]  README.md
├── [  35]  requirements.txt
├── [2.7K]  scanner.py
└── [6.5K]  urls.txt

0 directories, 7 files

Remarks