A simple tool to search a jar/zip and all inner jar/zip files for a target filename.
This tool will also print out version information (including, potentially, Log4J version info) from the manifest of any jar/zip files that contain the target file.
- Download the .zip from the releases page
- unzip it on the filesystem (use
java -jar
if you have to) - run the
jarsearch
script
Find all .war files in the current directory and search for JndiLookup.class:
find . -name \*.war -print -exec $HOME/jarsearch {} JndiLookup.class \;
Grep for '\*\*\*'
to only get information about "hits" printed out
More comprehensively, for instance:
find . -name \*.war -print -exec $HOME/jarsearch {} JndiLookup.class \; | grep '\*\*\*'
find . -name \*.ear -print -exec $HOME/jarsearch {} JndiLookup.class \; | grep '\*\*\*'
find . -name \*.jar -print -exec $HOME/jarsearch {} JndiLookup.class \; | grep '\*\*\*'
find . -name \*.zip -print -exec $HOME/jarsearch {} JndiLookup.class \; | grep '\*\*\*'
As stated in the license, this software is provided on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND.
Also note that this software is contributed on a personal basis. It is not dlivered, vetted, or endorsed by IBM in any way.