Closed GO0dspeed closed 2 years ago
Potentially updating code to loop through the headers in the scan_url
function instead of using all headers at once can potentially help the issue - although it will increase scan time.
@GO0dspeed Thanks for the reminder. I've updated the README to reflect the false negative possibilities.
We are tossing that idea in the air right now. Potentially adding a flag to submit the headers one at a scan with a BIG disclaimer that will increase time complexity by O(n^2) and could take significantly longer if given a large list of URLS + Headers.
🐛 Summary
When using log4j-scanner.py with headers.txt and headers-large.txt some servers will respond with a 400 bad request and payloads will not call back on otherwise vulnerable servers.
To reproduce
Steps to reproduce the behavior:
Expected behavior
Callbacks to happen
Any helpful log output or screenshots
bad request:
Successful trimmed request generates a callback (one header):