darnellkeith/PEASS-ng
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

log4j

Browse Source
This commit is contained in:
carlospolop 2021-12-23 20:41:15 -05:00
parent d9192ae1aa
commit bc328b1163
2 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
build_lists/sensitive_files.yaml
View File

@ -795,6 +795,21 @@ search:
type: d type: d
search_in: search_in:
- common - common
- name: Log4Shell
value:
config:
auto_check: False
files:
- name: "log4j-core*.jar"
value:
type: f
search_in:
- common
- /lib
- /lib32
- /lib64
- name: OpenVPN - name: OpenVPN
value: value:

2
linPEAS/builder/linpeas_parts/6_software_information.sh
View File

@ -181,7 +181,7 @@ peass{Ldap}
if [ "$PSTORAGE_LOG4SHELL" ] || [ "$DEBUG" ]; then if [ "$PSTORAGE_LOG4SHELL" ] || [ "$DEBUG" ]; then
print_2title "Searching Log4Shell vulnerable libraries" print_2title "Searching Log4Shell vulnerable libraries"
printf "%s\n" "$PSTORAGE_LOG4SHELL" | while read f; do printf "%s\n" "$PSTORAGE_LOG4SHELL" | while read f; do
echo "$f" | grep -E "log4j\-core\-(1\.|2\.[0-9][^0-9]|2\.1[0-6])" | sed -${E} "s,log4j\-core\-(1\.|2\.[0-9][^0-9]|2\.1[0-6]),${SED_RED},"; echo "$f" | grep -E "log4j\-core\-(1\.[^0]|2\.[0-9][^0-9]|2\.1[0-6])" | sed -${E} "s,log4j\-core\-(1\.[^0]|2\.[0-9][^0-9]|2\.1[0-6]),${SED_RED},";
done done
echo "" echo ""
fi fi