Un1kLog4shellScan

Security Classification: 【C-1】 | Publish Time:2024-02-05 | Category:Old Posts | Edit

Expiry Notice: The article was published three months ago. Please independently assess the validity of the technical methods and code mentioned within. :)

AI Summary: Un1kLog4shellScan是基于BurpSuite的插件，旨在被动扫描log4shell漏洞。通过对请求参数进行污染，插件实现了对多种数据格式的漏洞检测，避免遗漏。支持动态配置白名单和payload，通过API记录请求详情，并可接入webhook进行实时告警。插件安装简单，具有全参数污染和便捷管理等特点。 --- (From Model:gpt-4o-mini-2024-07-18)

Web3 Info

The ownership of the data in this article is secured by blockchain encryption technology and smart contracts, and is solely owned by the creator.

Comment List
Comment
© Copyright: This article is an original work and the copyright belongs to the  Depy's docs  unless marked as Reproduced

Please contact the blogger for authorization to reprint


『📕Category 』