https://github.com/codexlynx/envoy-filter-log4shell

:syringe: Plugable Envoy WebAssembly L7 (HTTP) firewall to prevent log4shell vulnerability injections.
https://github.com/codexlynx/envoy-filter-log4shell

blue-team cve-2021-44228 envoy istio log4shell waf wasm webassembly

Last synced: 2 months ago
JSON representation

:syringe: Plugable Envoy WebAssembly L7 (HTTP) firewall to prevent log4shell vulnerability injections.

• Host: GitHub
• URL: https://github.com/codexlynx/envoy-filter-log4shell
• Owner: codexlynx
• License: gpl-3.0
• Created: 2021-12-15T10:35:48.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2022-01-29T23:43:05.000Z (over 2 years ago)
• Last Synced: 2024-06-21T17:04:27.188Z (3 months ago)
• Topics: blue-team, cve-2021-44228, envoy, istio, log4shell, waf, wasm, webassembly
• Language: Go
• Homepage:
• Size: 17.6 KB
• Stars: 3
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# envoy-filter-log4shell

Plugable Envoy WebAssembly L7 (HTTP) firewall to prevent log4shell vulnerability injections.

[![](https://github.com/codexlynx/envoy-filter-log4shell/workflows/CI/badge.svg)](https://github.com/codexlynx/systemd-rest/actions) [![AUR](https://img.shields.io/github/license/codexlynx/envoy-filter-log4shell)](LICENSE)

## Compilation:

#### Requirements:

* A version of __Docker__ with __BuildKit__ support.

* GNU __make__ utility.

#### Procedure:

* Run: `make`.

* Check the correct creation of `bin/filter-log4shell.wasm` file.

## Resources:

* https://events.istio.io/istiocon-2021/slides/c8p-ExtendingEnvoyWasm-EdSnible.pdf

* https://www.envoyproxy.io/docs/envoy/v1.20.1/configuration/http/http_filters/wasm_filter.html

* https://github.com/istio-ecosystem/wasm-extensions

* https://github.com/proxy-wasm/spec