google/log4jscanner

View on GitHub ↗ ★ 1,560 Go archived

A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.

3 mentions on Hacker News by 3 people: 2 stories, 1 comment · first 2021-12-29 · latest 2022-01-01

Mentions per year 3 mentions · busiest year 2022 (2)

20082026

All Stories Comments Newest Top Oldest

The essence is: https://github.com/google/log4jscanner/blob/main/jar/jar.go this is the decision logic: func (c *checker) bad() bool { return (c.hasLookupClass && c.hasOldJndiManagerConstructor) || (c.hasLookupClass &&…
comment by hvasilev · 2022-01-01 · in Log4jscanner