Log4Shell Everywhere
Summary: PortSwigger's BApp Store lists a Burp extension that forks James Kettle's Collaborator Everywhere and swaps its injection parameters for payloads targeting the critical log4j CVE-2021-44228 vulnerability. The tool injects log4j exploit headers into in-scope proxy traffic and uses a ${lower:x} pattern in DNS requests to confirm a JNDI lookup, raising confidence to certain and reporting findings in the Issues tab.
Bottom line: The extension was last updated on 16 December 2021, days after Log4Shell disclosure, and requires a Burp Professional license - a reminder that testing for CVE-2021-44228 in your own proxy traffic is a third-party add-on, not a default check.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-44228
- Related
- CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Dec 10, 2021Log4Shell Scanner Cyber Risks ·