Log4jScanner : A Comprehensive Tool For Vulnerability Detection

Log4jScanner is a powerful tool designed to help penetration testers identify Log4j-related vulnerabilities, specifically CVE-2021-44228 and CVE-2021-45046, in web applications.

It is primarily used for black box testing on given subdomains, making it an essential asset for security professionals and bug bounty hunters.

Key Features

• Fast & MultiThreaded: Log4jScanner is optimized for speed and efficiency, allowing it to handle multiple threads simultaneously, which is beneficial for mass-scale bug bounty operations.
• Scan Types: It offers two types of scans:
  • Basic Scan: Uses a single basic Log4Shell payload to test web applications.
  • Full Scan: Utilizes all available Log4Shell payloads for comprehensive testing.
• Payload Obfuscation: Includes over 30 obfuscated Log4j payloads to evade detection by security measures like Web Application Firewalls (WAFs).
• Endpoint Fuzzing: Fuzzes various endpoints such as HTTP headers, GET and POST parameters (with and without malicious headers), and JSON data parameters.
• Customizable POST Parameters: Allows users to add or remove POST parameters for testing, including common fields like “username,” “email,” and “password.”

Installation And Usage

1. Prerequisites: Requires Python 3.X.
2. Installation: Can be installed using pip with the command pip3 install Log4jScanner.
3. Usage: Mandatory parameters include either --url-list or --url. Users can also import the module into their Python scripts for customized usage.

To perform a basic scan on a list of URLs, you can use the following command:

bashlog4jscanner -m httpx_subdomains.txt

This command scans the URLs listed in httpx_subdomains.txt for Log4j vulnerabilities.

Log4jScanner is provided “as is” without warranty, and its use is at the user’s own risk. The developers assume no liability for any misuse or damage caused by the program.

Log4jScanner is a versatile and powerful tool for identifying Log4j vulnerabilities, offering extensive features that make it suitable for both small-scale testing and large-scale bug bounty operations.

Its ability to fuzz multiple endpoints and use obfuscated payloads enhances its effectiveness in detecting vulnerabilities that might be missed by simpler tools.