opencsi/log4j-scan repository overview

⁠Run a Container

docker run -it --rm opencsi/log4j-scan -u https://log4j.lab.secbot.local:8080⁠ --run-all-tests

⁠With URL list "urls.txt" in current directory

docker run -it --rm -v $PWD:/data log4j-scan -l /data/urls.txt --run-all-tests

⁠Create a Known-Vulnerable Server

docker run --name vulnerable-app -it --rm -p 9100:8080 ghcr.io/christophetd/log4shell-vulnerable-app

⁠Credit

https://github.com/fullhunt/log4j-scan⁠