search

fullhunt / log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
MIT License
3.4k stars 740 forks source link

Exception: Can not initiate interact.sh DNS callback client #66

Closed billbraz closed 2 years ago

billbraz commented 2 years ago

I get this output when running this script:

[•] CVE-2021-44228 - Apache Log4j RCE Scanner [•] Scanner provided by FullHunt.io - The Next-Gen Attack Surface Management Platform. [•] Secure your External Attack Surface with FullHunt.io. [•] Initiating DNS callback server (interact.sh). Traceback (most recent call last): File "log4j-scan.py", line 362, in main() File "log4j-scan.py", line 332, in main dns_callback = Interactsh() File "log4j-scan.py", line 195, in init self.register() File "log4j-scan.py", line 206, in register raise Exception("Can not initiate interact.sh DNS callback client") Exception: Can not initiate interact.sh DNS callback client

What am I missing? Tried it with and without a proxy and get the exact same error.

Thanks!

billbraz commented 2 years ago

I figured it out. My company is blocking access to interact.sh. Tried from my own PC and it works fine. Thanks for sharing your code!