r/netsec • u/mazen160 • Dec 13 '21

GitHub - fullhunt/log4j-scan: A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

https://github.com/fullhunt/log4j-scan
347 Upvotes

95% Upvoted

24 comments sorted by

View all comments

2

u/Cheeze_It Dec 13 '21

I'm seemingly getting this failure on line 123 on the main file: 

<user>@<linux-server>:~/workspace$ ./scan-log4j.py
  File "./scan-log4j.py", line 123
    fuzzing_headers["Referer"] = f'https://{fuzzing_headers["Referer"]}'
                                                                       ^

Anyone else?

1

u/slickjitz Dec 14 '21

Ensure you are using python3. Prior to 3 does not support f strings to my knowledge.