Documentation
¶
Index ¶
Constants ¶
View Source
const ( ModuleID = "log4shell-probe" ModuleName = "Log4Shell Probe" ModuleShort = "Detects Log4Shell (CVE-2021-44228) via JNDI payload injection with OAST callbacks" )
Variables ¶
View Source
var ( ModuleDesc = `` /* 657-byte string literal not displayed */ ModuleConfirmation = "Confirmed when target server performs outbound DNS or LDAP lookup to OAST callback URL injected via JNDI expression" ModuleSeverity = severity.Critical ModuleConfidence = severity.Certain ModuleTags = []string{"java", "rce", "heavy"} )
Functions ¶
This section is empty.
Types ¶
type Module ¶
type Module struct {
modkit.BaseActiveModule
// contains filtered or unexported fields
}
Module implements the Log4Shell probe active scanner.
func (*Module) ScanPerInsertionPoint ¶
func (m *Module) ScanPerInsertionPoint( ctx *httpmsg.HttpRequestResponse, ip httpmsg.InsertionPoint, httpClient *http.Requester, scanCtx *modkit.ScanContext, ) ([]*output.ResultEvent, error)
ScanPerInsertionPoint injects JNDI payloads into request parameters. Findings arrive asynchronously via OAST polling callbacks.
func (*Module) ScanPerRequest ¶
func (m *Module) ScanPerRequest( ctx *httpmsg.HttpRequestResponse, httpClient *http.Requester, scanCtx *modkit.ScanContext, ) ([]*output.ResultEvent, error)
ScanPerRequest injects JNDI payloads into common HTTP headers. Findings arrive asynchronously via OAST polling callbacks.
Source Files
Click to show internal directories.
Click to hide internal directories.