{"id":17919856,"url":"https://github.com/dwisiswant0/look4jar","last_synced_at":"2025-03-24T00:32:06.584Z","repository":{"id":47325907,"uuid":"439599795","full_name":"dwisiswant0/look4jar","owner":"dwisiswant0","description":"Looking for JAR files that are vulnerable to Log4j RCE (CVE‐2021‐44228)?","archived":false,"fork":false,"pushed_at":"2022-03-02T15:42:36.000Z","size":12,"stargazers_count":44,"open_issues_count":0,"forks_count":5,"subscribers_count":4,"default_branch":"master","last_synced_at":"2024-05-01T17:25:18.098Z","etag":null,"topics":["golang","log4j","log4j2","rce","security","vulnerability"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dwisiswant0.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null},"funding":{"github":["dwisiswant0"],"custom":["https://paypal.me/dw1s","https://saweria.co/dwisiswant0","https://unstoppabledomains.com/d/dwisiswant0.crypto"]}},"created_at":"2021-12-18T11:39:38.000Z","updated_at":"2024-01-22T14:24:25.000Z","dependencies_parsed_at":"2022-08-29T23:00:57.954Z","dependency_job_id":null,"html_url":"https://github.com/dwisiswant0/look4jar","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dwisiswant0%2Flook4jar","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dwisiswant0%2Flook4jar/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dwisiswant0%2Flook4jar/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dwisiswant0%2Flook4jar/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dwisiswant0","download_url":"https://codeload.github.com/dwisiswant0/look4jar/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":221925954,"owners_count":16902789,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["golang","log4j","log4j2","rce","security","vulnerability"],"created_at":"2024-10-28T20:19:36.137Z","updated_at":"2024-10-28T20:19:36.766Z","avatar_url":"https://github.com/dwisiswant0.png","language":"Go","funding_links":["https://github.com/sponsors/dwisiswant0","https://paypal.me/dw1s","https://saweria.co/dwisiswant0","https://unstoppabledomains.com/d/dwisiswant0.crypto"],"categories":[],"sub_categories":[],"readme":"# Look4jar\n\n![look4jar](https://user-images.githubusercontent.com/25837540/146642218-85adc53a-3df3-4ce8-b7a6-8268e4f2e03e.jpg)\n\nLook for JAR files that vulnerable to [Log4j RCE](https://logging.apache.org/log4j/2.x/security.html) ([CVE‐2021‐44228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228))\n\n---\n\n## Objectives\n\nIt differs from some other tools that scan for vulnerable remote services by running trigger exploits such as track DNS pingbacks. **Look4jar** tried to find `JndiLookup.class` file in the java archive _(recursively)_, if yet any — then it will look for `log4j2.enableJndiLookup` in `JndiManager.class` file which it deems possibly vulnerable.\n\n## Installation\n\n- Download a prebuilt binary from [releases page](https://github.com/dwisiswant0/look4jar/releases/latest), unpack and run! or:\n- If you have **[Go1.16+](https://go.dev/doc/install)** compiler installed \u0026 configured:\n\n```console\n$ go install dw1.io/look4jar@latest\n```\n\n**— or**\n\nBuilding from source code:\n\n```console\n$ git clone git@github.com:dwisiswant0/look4jar.git\n$ cd look4jar/\n$ go mod tidy\n$ go build .\n$ ./look4jar -h\n```\n\n## Usage\n\n```\n\n  look4jar\n  ---\n  Look for JAR files that vulnerable to Log4j RCE (CVE‐2021‐44228)\n  @dwisiswant0\n\n\nUsage:\n  look4jar -p /path/to/file [OPTIONS...]\n\nOptions:\n  -p, --path \u003cFILE/PATH\u003e      Specify EAR/JAR/WAR file/directory to scan recursively\n  -v, --verbose               Verbose mode (default false)\n\nExamples:\n  look4jar -p /path/to/file.jar\n  look4jar -p /usr/local/lib -v\n```\n\n## Similar Projects\n\n- [yahoo/check-log4j](https://github.com/yahoo/check-log4j)\n\n## License\n\n**Look4jar** is distributed under Apache License v2.0. See `LICENSE`.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdwisiswant0%2Flook4jar","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdwisiswant0%2Flook4jar","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdwisiswant0%2Flook4jar/lists"}