Black Hat Ethical Hacking
Offensive Security Tool: log4j-scan

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: log4j-scanPost Views: 490 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 4 Minutes

Offensive Security Tool: log4j-scan GitHub Link log4j-scanA fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts.

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/log4j.png DescriptionThis tool written by fullhunt, who have been researching the Log4J RCE (CVE-2021-44228) since it was released, and worked in preventing this vulnerability with their customers. They are open-sourcing an open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability. This shall be used by security teams to scan their infrastructure for Log4J RCE, and also test for WAF bypasses that can result in achieving code execution on the organization’s environment.

It supports DNS OOB callbacks out of the box, there is no need to setup a DNS callback server.
See Also: Log4j attackers switch to injecting Monero miners via RMI Features* Support for lists of URLs.
* Fuzzing for more than 60 HTTP request headers (not only 3-4 headers as previously seen tools).
* Fuzzing for HTTP POST Data parameters.
* Fuzzing for JSON data parameters.
* Supports DNS callback for vulnerability discovery and validation.
* WAF Bypass payloads. Usage$ python3 log4j-scan.py -h
[•] CVE-2021-44228 - Apache Log4j RCE Scanner
[•] Scanner provided by FullHunt.io - The Next-Gen Attack Surface Management Platform.
[•] Secure your External Attack Surface with FullHunt.io. usage: log4j-scan.py [-h] [-u URL] [-l USEDLIST] [--request-type REQUEST_TYPE] [--headers-file HEADERS_FILE] [--run-all-tests] [--exclude-user-agent-fuzzing]
[--wait-time WAIT_TIME] [--waf-bypass] [--dns-callback-provider DNS_CALLBACK_PROVIDER] [--custom-dns-callback-host CUSTOM_DNS_CALLBACK_HOST] optional arguments: -h, --help show this help message and exit -u URL, --url URL Check a single URL. -p PROXY, --proxy PROXY Send requests through proxy. -l USEDLIST, --list USEDLIST Check a list of URLs. --request-type REQUEST_TYPE Request Type: (get, post) - [Default: get]. --headers-file HEADERS_FILE Headers fuzzing list - [default: headers.txt]. --run-all-tests Run all available tests on each URL. --exclude-user-agent-fuzzing Exclude User-Agent header from fuzzing - useful to bypass weak checks on User-Agents. --wait-time WAIT_TIME Wait time after all URLs are processed (in seconds) - [Default: 5]. --waf-bypass Extend scans with WAF bypass payloads. --dns-callback-provider DNS_CALLBACK_PROVIDER DNS Callback provider (Options: dnslog.cn, interact.sh) - [Default: interact.sh]. --custom-dns-callback-host CUSTOM_DNS_CALLBACK_HOST Custom DNS Callback Host.
See Also: Complete Offensive Security and Ethical Hacking Course Scan a Single URL$ python3 log4j-scan.py -u https://log4j.lab.secbot.local Scan a Single URL using all Request Methods: GET, POST (url-encoded form), POST (JSON body)$ python3 log4j-scan.py -u https://log4j.lab.secbot.local –run-all-tests Discover WAF bypasses on the environment.$ python3 log4j-scan.py -u https://log4j.lab.secbot.local –waf-bypass Scan a list of URLs$ python3 log4j-scan.py -l urls.txt Installation$ pip3 install -r requirements.txt Docker Supportgit clone https://github.com/fullhunt/log4j-scan.git cd log4j-scan
sudo docker build -t log4j-scan .
sudo docker run -it --rm log4j-scan # With URL list "urls.txt" in current directory
docker run -it --rm -v $PWD:/data log4j-scan -l /data/urls.txt Legal DisclaimerT[...]

___________________________
@hacking_Attack
@Hacking_Video

his project is made for educational and ethical testing purposes only. Usage of log4j-scan for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state and federal laws.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/40pivot2-90x90.png Offensive Security Tool: Cobalt Strike1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/gomapenum-90x90.png Offensive Security Tool: GoMapEnum2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/hashcat-90x90.png Offensive Security Tool: Hashcat3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/bugbountytools-90x90.png Offensive Security Tools: Awesome Bug Bounty Tools4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/unknown-1-90x90.png Offensive Security Tool: Pentesting Tools1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/unknown-90x90.png Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-1-90x90.png Offensive Security Tool: ZipExec2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/carbon-2048x1374-1-90x90.png OSINT Tool: Osintgram2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/dalfox-90x90.png Offensive Security Tool: Dalfox2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-90x90.png Offensive Security Tool: Whispers2 months ago
The post Offensive Security Tool: log4j-scan first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

GemUni’s Bug Hunter Event Begin
https://medium.com/@GemUni_Official/gemunis-bug-hunter-event-begin-177bf57401db?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Dear Genians,Continue reading on Medium » (https://medium.com/@GemUni_Official/gemunis-bug-hunter-event-begin-177bf57401db?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploiting log4jshell(CVE-2021–44228)

Hi readers, here we will be looking into exploitation of CVE-2021–44228.Continue reading on Medium »
Read more...

Ambire X Immunefy Bug Bounty: Audit Our Code and Earn Rewards

We are inviting security researchers to audit our smart contractsContinue reading on The Ambire Blog »
Read more...

Exploiting log4jshell(CVE-2021–44228)
https://pswalia2u.medium.com/exploiting-log4jshell-cve-2021-44228-5fc73e924548?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi readers, here we will be looking into exploitation of CVE-2021–44228.Continue reading on Medium » (https://pswalia2u.medium.com/exploiting-log4jshell-cve-2021-44228-5fc73e924548?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I hacked into one of India’s biggest online book stores(RCE and more)
https://vikaran101.medium.com/how-i-hacked-into-one-of-indias-biggest-online-book-stores-rce-and-more-887ef6460935?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This article is going to be about how I found my 1st RCE on one of India’s biggest e-commerce sites(+ a few more bugs).Continue reading on Medium » (https://vikaran101.medium.com/how-i-hacked-into-one-of-indias-biggest-online-book-stores-rce-and-more-887ef6460935?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Ambire X Immunefy Bug Bounty: Audit Our Code and Earn Rewards
https://blog.ambire.com/ambire-x-immunefy-bug-bounty-audit-our-code-and-earn-rewards-5e1bb8dc7a6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

We are inviting security researchers to audit our smart contractsContinue reading on The Ambire Blog » (https://blog.ambire.com/ambire-x-immunefy-bug-bounty-audit-our-code-and-earn-rewards-5e1bb8dc7a6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

So many updates in the Open-Source firmware scanner EMBA right before christmas. We have created a new teaser video to give you some insights ... Check it out
https://www.reddit.com/r/Pentesting/comments/rijq7k/so_many_updates_in_the_opensource_firmware/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/_m-1-k-3_ (https://www.reddit.com/user/_m-1-k-3_)
[link] (https://github.com/e-m-b-a/emba) [comments] (https://www.reddit.com/r/Pentesting/comments/rijq7k/so_many_updates_in_the_opensource_firmware/)

___________________________
@hacking_Attack
@Hacking_Video