Operational information regarding the log4shell vulnerabilities in the Log4j logging library.

• UpdatedJun 15, 2022
• Python

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

• UpdatedJan 15, 2022
• Java

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

• UpdatedApr 7, 2022
• Java

A public open sourced tool. Log4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any application. It is able to even find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too! TAG_OS_TOOL, OWNER_KELLY, DC_PUBLIC

• UpdatedMar 10, 2022
• Java

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

• UpdatedDec 27, 2022
• Python

Log4j Vulnerability Scanner for Windows

• UpdatedMar 22, 2023
• C

Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

• UpdatedJun 21, 2023
• Python

• UpdatedMar 25, 2025
• Python

Scanner to send specially crafted requests and catch callbacks of systems that are impacted by log4j log4shell vulnerability and to detect vulnerable log4j versions on your local file-system

• UpdatedFeb 15, 2022
• Go

Scanner that scans local files for log4shell vulnerability. Does bytecode analysis so it does not rely on metadata. Will find vulnerable log4j even it has been self-compiled/repackaged/shaded/nested (e.g. uberjar, fatjar) and even obfuscated.

• UpdatedMar 25, 2025
• Java

CVE-log4j CheckMK plugin

• UpdatedFeb 14, 2022
• Python

A simple and fast Maven dependency vulnerability scanner. Check existence of vuln JARs (transitive)

• UpdatedMar 17, 2025
• Java

Replicating CVE-2021-45105

• UpdatedDec 20, 2021
• Java

Scans the file system to find Log4Shell vulnerabilities.

• UpdatedSep 26, 2022
• Rust

Script to combine all host specific json outputs from log4j-detector into one single csv file. Requires only standard python installation, no further dependencies.

• UpdatedDec 27, 2021
• Python