hillu/local-log4j-vuln-scanner

Issues

• Virustotal 2 security vendors and no sandboxes flagged this file as malicious

  #60 opened 2 years ago by isleeps
  1

• Crash when jar file is zero bytes

  #59 opened 3 years ago by a087228
  2

• installation with go install

  #57 opened 3 years ago by vitikyalapatii
  2

• x86 support?

  #54 opened 3 years ago by EmissaryVX
  3

• Unable to scan network filesystems

  #51 opened 3 years ago by sjquinney
  5

• Scans network shares on macOS

  #50 opened 3 years ago by staze
  9

• CVE-2021-45105 should mark 2.16 as vulnerable

  #43 opened 3 years ago by damoon
  4

• command line option for jar file matching

  #26 opened 3 years ago by danielgrahl
  7

• Just curious - why do you do f.Seek(0, END) twice?

  #47 opened 3 years ago by dladlk
  1

• unable to unzip jar files

  #18 opened 3 years ago by xt0x1c
  10

• Feature request: -exclude with wildcards

  #46 opened 3 years ago by fpschultze
  1

• How to use filter.go

  #45 opened 3 years ago by natschel
  4

• Detection flags jar files with JndiLookup.class removed (but JndiManager.class present)

  #34 opened 3 years ago by leepfrog-ger
  8

• Even with exclude, tool scans folders

  #42 opened 3 years ago by GElkayam
  4

• apache log4j 2.17 already out, please add

  #41 opened 3 years ago by Jordy694
  1

• Virustotal 17 security vendors and 1 sandbox flagged this file as malicious

  #7 opened 3 years ago by askvpb
  18

• Detection of CVE 2021-45046?

  #21 opened 3 years ago by ZerhackerJagi
  5

• Treat 2.12.2 as fixed version

  #35 opened 3 years ago by leepfrog-ger
  0

• New magic number check failure

  #36 opened 3 years ago by Ghepardo
  2

• Strange "indicator" message from scanner

  #37 opened 3 years ago by Ghepardo
  1

• Patcher does not seem to fix WAR files

  #38 opened 3 years ago by Ghepardo
  1

• Can't read magic from JAR file member

  #29 opened 3 years ago by sjquinney
  1

• (-)-exclude flag

  #20 opened 3 years ago by planetmija
  2

• Misnamed executable for patching

  #27 opened 3 years ago by Ghepardo
  1

• Scanner cannot find vulnerabilites when class is esclazz

  #25 opened 3 years ago by ccoltx
  3

• False positive log4j-core-2.15.0.jar

  #1 opened 3 years ago by simon04
  2

• ignore-v1 not working

  #17 opened 3 years ago by RealKelsar
  1

• Flagging 1.X Versions

  #11 opened 3 years ago by theonlykernel
  5

• Usage instructions?

  #12 opened 3 years ago by adamjgrant
  2

• Segfaults on CentOS 7/8

  #10 opened 3 years ago by pastascript
  1

• [Feature Request] Arm64 build in releases

  #4 opened 3 years ago by KittyBorgX
  4

• Scanning of a directory ending .war leads in an error

  #6 opened 3 years ago by karstenlehmann
  2