Log4Shell Scanner
Summary: PortSwigger's BApp Store lists a Burp Extender plugin, version 0.2.4 by SilentSignal, that registers as an Active scanner check for Log4Shell, CVE-2021-44228, and generates two payload types: one expanding only the hostname, and a more complex one that also includes the username via USER and USERNAME for Unix-like and Windows compatibility. Synchronous interactions are logged by the built-in scanner, while a background thread polls for Collaborator interactions once per minute to find vulnerable hosts that naive testing misses.
Key Takeaway: The plugin's premise is that Log4j logs untrusted data by design, so vulnerable hosts sit hidden at the end of complex parsing paths across multiple systems where it is not trivial to know which component is exposed - meaning a clean scan from ordinary testing may not mean you are clean.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-44228
- Related
- CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Dec 10, 2021Log4Shell Everywhere Cyber Risks ·