log4j Scanner

[spinto]

Is there a powershell script that can scan local computers for the log4j vulnerability?  If not, does anyone have any recommendations on how to do this via the Pulseway agents?

[Jamie Taylor]

Hey @spinto, I have raised a support ticket for you query. Our team will get in touch with shortly regarding this. 

[Mark G38]

@spinto Yes there is.  Was released by Datto RMM in collaboration with others. 

Modify it to suit your needs.  It works well to identify vulnerable files as it scans inside jar files as well.  

 

With some small modifications you can run it through Pulseway of course.   

https://github.com/datto/log4shell-tool

Edited December 20, 2021 by Mark G38