Skip to content

Commit

Permalink
Add sample output
Browse files Browse the repository at this point in the history
  • Loading branch information
hillu committed Dec 12, 2021
1 parent 0893bef commit d5a7f0a
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,16 @@ Linux distributions may not be recognized.
$ ./log4j-vuln-scanner /path/to/app1 /path/to/app2 …
```

If class files indicating one of the vulnerabilities are found,
messages like the following are printed to standard output:
``` console
./local-log4j-vuln-scanner - a simple local log4j vulnerability scanner

indicator for vulnerable component found in /path/to/vuln/log4shell-vulnerable-app-0.0.1-SNAPSHOT.war::WEB-INF/lib/log4j-core-2.14.1.jar (org/apache/logging/log4j/core/net/JndiManager$JndiManagerFactory.class): log4j 2.14.0-2.14.1
indicator for vulnerable component found in /path/to/vuln/log4shell-vulnerable-app-0.0.1-SNAPSHOT.war::WEB-INF/lib/log4j-core-2.14.1.jar (org/apache/logging/log4j/core/net/JndiManager.class): log4j 2.14.0-2.14.1
Scan finished
```

# License

GNU General Public License, version 3
Expand Down

0 comments on commit d5a7f0a

Please sign in to comment.