From d5a7f0a62ca73d5025f3d1d03ceec101bcc751a0 Mon Sep 17 00:00:00 2001 From: Hilko Bengen Date: Sun, 12 Dec 2021 23:02:09 +0100 Subject: [PATCH] Add sample output --- README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/README.md b/README.md index de2bd21..188a8e3 100644 --- a/README.md +++ b/README.md @@ -20,6 +20,16 @@ Linux distributions may not be recognized. $ ./log4j-vuln-scanner /path/to/app1 /path/to/app2 … ``` +If class files indicating one of the vulnerabilities are found, +messages like the following are printed to standard output: +``` console +./local-log4j-vuln-scanner - a simple local log4j vulnerability scanner + +indicator for vulnerable component found in /path/to/vuln/log4shell-vulnerable-app-0.0.1-SNAPSHOT.war::WEB-INF/lib/log4j-core-2.14.1.jar (org/apache/logging/log4j/core/net/JndiManager$JndiManagerFactory.class): log4j 2.14.0-2.14.1 +indicator for vulnerable component found in /path/to/vuln/log4shell-vulnerable-app-0.0.1-SNAPSHOT.war::WEB-INF/lib/log4j-core-2.14.1.jar (org/apache/logging/log4j/core/net/JndiManager.class): log4j 2.14.0-2.14.1 +Scan finished +``` + # License GNU General Public License, version 3