diff --git a/build_lists/sensitive_files.yaml b/build_lists/sensitive_files.yaml index ddb0b2c..17878c0 100644 --- a/build_lists/sensitive_files.yaml +++ b/build_lists/sensitive_files.yaml @@ -795,6 +795,21 @@ search: type: d search_in: - common + + - name: Log4Shell + value: + config: + auto_check: False + + files: + - name: "log4j-core*.jar" + value: + type: f + search_in: + - common + - /lib + - /lib32 + - /lib64 - name: OpenVPN value: diff --git a/linPEAS/builder/linpeas_parts/6_software_information.sh b/linPEAS/builder/linpeas_parts/6_software_information.sh index fd45103..4d627f4 100644 --- a/linPEAS/builder/linpeas_parts/6_software_information.sh +++ b/linPEAS/builder/linpeas_parts/6_software_information.sh @@ -181,7 +181,7 @@ peass{Ldap} if [ "$PSTORAGE_LOG4SHELL" ] || [ "$DEBUG" ]; then print_2title "Searching Log4Shell vulnerable libraries" printf "%s\n" "$PSTORAGE_LOG4SHELL" | while read f; do - echo "$f" | grep -E "log4j\-core\-(1\.|2\.[0-9][^0-9]|2\.1[0-6])" | sed -${E} "s,log4j\-core\-(1\.|2\.[0-9][^0-9]|2\.1[0-6]),${SED_RED},"; + echo "$f" | grep -E "log4j\-core\-(1\.[^0]|2\.[0-9][^0-9]|2\.1[0-6])" | sed -${E} "s,log4j\-core\-(1\.[^0]|2\.[0-9][^0-9]|2\.1[0-6]),${SED_RED},"; done echo "" fi