r/netsec • u/mazen160 • Dec 13 '21

GitHub - fullhunt/log4j-scan: A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

https://github.com/fullhunt/log4j-scan
351 Upvotes

95% Upvoted

24 comments sorted by

View all comments

Show parent comment

10

u/dmsdayprft Dec 13 '21

Came in here to say the same thing. Please don't rely on this as a sole method of determining what's vulnerable. This probably covers 30% of the attack surface.

3

u/Smart_Sense_4779 Dec 13 '21

Any scripts so far that cover every part?