search

mergebase / log4j-detector

A public open sourced tool. Log4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any application. It is able to even find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too! TAG_OS_TOOL, OWNER_KELLY, DC_PUBLIC
Other
638 stars 98 forks source link

add a exclude function for folders/files #11

Closed Daniel-from-Germany closed 2 years ago

Daniel-from-Germany commented 2 years ago

add a exclude function for folders/files

chgad commented 2 years ago

This maybe especially goof for those issues here #25 and #30

beckerr-rzht commented 2 years ago

The problem could be solved with find and the option --stdin which I added. See #42

Example:

find / -xdev -type f -not -path "/skip/this/path/*" | java -jar log4j-detector-2021.12.17.jar --stdin
juliusmusseau commented 2 years ago

implemented in v2021.12.20