Home / Java / Security

Burpsuite extension for log4j2rce

BurpLog4j2Scan Description BurpLog4j2Scan is a Burp Suite Extension written in JAVA which could be useful as scan log4j2rce. Screenshot start scan pro
Information
Category: Java / Security
Watchers: 5
Star: 191
Fork: 48
Last update: Dec 14, 2021
Resource links
https://github.com/tangxiaofeng7/BurpLog4j2Scan
0 Open More issues
Closed

Create 4747SECURITY.md

.dll

opened Dec 13, 2021 by Totloves 5
Closed

Issue when importing plugin

java.lang.ClassNotFoundException: burp.BurpExtender at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:471) at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:589) at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:522) at java.base/java.lang.Class.forName0(Native Method) at java.base/java.lang.Class.forName(Class.java:398) at burp.avu.a(Unknown Source) at burp.avu.(Unknown Source) at burp.co7.a(Unknown Source) at burp.d_u.lambda$panelLoaded$0(Unknown Source) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) at java.base/java.lang.Thread.run(Thread.java:829)

opened Dec 11, 2021 by DreyAnd 4
Closed

师傅这个是不支持get请求里面的url参数嘛

image 靶场一：https://github.com/vulhub/vulhub/tree/master/log4j/CVE-2021-44228 靶场二：是你图片里面的那套

靶场一没扫出来漏洞

opened Dec 14, 2021 by legoc 2
Closed

After Installing BurpExtender.java But not showing.

Dear Sir,

After installing BurpExtender.java its shows shiroscan tab

https://i.imgur.com/n4ywywV.png

but not showing this:

Extensions->BurpLog4j2-scan->Send to Log4jScan

https://i.imgur.com/xzzGW8e.png.

How you tell how to install this BurpLog4j2Scan.?

Thanks

opened Dec 12, 2021 by niravsikotaria 2
Closed

Errors when I load extension in Burp

Not working... OS - kali linux 2021.4 My Burp Suite Community Edition - v2021.10.3 Installed JAVA on my PC: openjdk version "11.0.13" 2021-10-19 OpenJDK Runtime Environment (build 11.0.13+8-post-Debian-1) OpenJDK 64-Bit Server VM (build 11.0.13+8-post-Debian-1, mixed mode, sharing)

javac 11.0.13

When I go to Extender -> Extensions -> Add -> Load gradle-wrapper.jar and then appear errors:

java.lang.ClassNotFoundException: burp.BurpExtender at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:476) at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:589) at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:522) at java.base/java.lang.Class.forName0(Native Method) at java.base/java.lang.Class.forName(Class.java:398) at burp.am4.a(Unknown Source) at burp.am4.(Unknown Source) at burp.c04.a(Unknown Source) at burp.h14.lambda$panelLoaded$0(Unknown Source) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) at java.base/java.lang.Thread.run(Thread.java:829)

How can I compile this extension? There is no file - pom.xml - in your directories of BurpLog4j2Scan-master...

opened Dec 14, 2021 by ValidCoder 1
Closed

1.8jdk的burp好像不能使用这个插件

null

opened Dec 11, 2021 by Pass-A 0
Open

Scanning doesn't finish.

I installed BurpLog4j2Scan but scanning doesn't finish. How do I do?

https://imgur.com/DMszCxM

opened Dec 14, 2021 by Taylorcho123 7

Contents

    whwlsfb BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs
    p0desta A automatic bypass 403 Burpsuite plugin
    theLSA burpsuite extension for check unauthorized vulnerability
    sting8k Burpsuite Extension to bypass 403 restricted directory
    jas502n Burpsuite Plugin For AES Crack
    1d8 Getting Genymotion & Burpsuite setup for Android Mobile App Analysis
    wdahlenburg Burpsuite plugin for Interact.sh
    0Chencc CTFCrackTools 's BurpSuite Plugin - Decode and Encode
    Static-Flow This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.
    whwlsfb Log4j2 RCE Passive Scanner plugin for BurpSuite
    asm89 The missing cache extension for Twig. Caching template fragments with Twig.
    cdoco :cyclone: A PHP extension for JSON Web Token (JWT)
    abettadapur Chrome extension for Redux-Saga Devtools
    momos1337 Log4j RCE - (CVE-2021-44228)
    pochubs Log4j2 RCE Passive Scanner plugin for BurpSuite
    phpv8 PHP extension for V8 JavaScript engine
    mubaidr vuejs-extension-pack vscode - An extension packf or vscode with popular VS Code extensions for Vue.js development.
    mubaidr vue-chrome-extension-boilerplate - Boilerplate for Chrome extension using Vue.js and Webpack
    ALiangLiang vue-webpack-chrome-extension-template - Template for quick creation of Chrome extension on Vuejs hot reloading when developing.
    mislav GitHub CLI extension for fuzzy finding, quickly switching between and deleting branches.
    jdfreder Allows Jupyter Notebook extension writers to make their extension pip installable!
    Share this repo

    Related Repos


    Security
    7
    JavaPassDump
    corener JavaPassDump 背景： 红队实战中，有遇到数据库的配置信息加密的情况，有些甚至在Native层处理加解密，为简化红队流程，产生一个通用的数据库信息提取工具：JavaPassDump。
     
    Security
    14
    Avoid the NEXT Log4Shell vulnerability!
    gredler A Java agent that disables features you don't use, before an attacker uses them against you.
     
    Security
    4
    JNDIExploit v1.2
    IR0DayToday # JNDIExploit JNDIExploit v1.2 JNDIExploit v1.2 here can u downoad direct from this git Direct Download for linux wget https://download1320.mediafire
     
    Security
    191
    Burpsuite extension for log4j2rce
    tangxiaofeng7 BurpLog4j2Scan Description BurpLog4j2Scan is a Burp Suite Extension written in JAVA which could be useful as scan log4j2rce. Screenshot start scan pro
     
    Security
    845
    SonarSource Static Analyzer for Java Code Quality and Security
    SonarSource Code Quality and Security for Java This SonarSource project is a code analyzer for Java projects. Information about the analysis of Java features is a
     
    Security
    280
    Log4j2 RCE Passive Scanner plugin for BurpSuite
    whwlsfb Log4j2 RCE Passive Scanner plugin for BurpSuite
     
    Security
    2.1k
    Log4j impact manufacturers and components summary from the Internet community
    YfryTchsGD Log4j impact manufacturers and components summary from the Internet community. Welcome everyone to submit mr to perfect the possible influence surface.
     
    Security
    990
    Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.
    christophetd Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.
     
    Security
    38
    A automatic bypass 403 Burpsuite plugin
    p0desta AutoBypass403-BurpSuite A burpsuite plugin help me automatic bypass 403. ChangeLog 2021-12-04 support multi-threaded concurrency 2021-12-02 First publ
     
    Security
    219
    Password strength estimator
    GoSimpleLLC Nbvcxz - Password strength estimator - [] nbvcxz is java library (and standalone console program) which is heavily inspired by the work in zxcvbn. Pas
     
    Security
    3
    Keeps LetsEncrypt certificates up-to-date for your Spring Boot Web application
    valb3r Keeps LetsEncrypt certificates up-to-date for your Spring Boot Web application. Pure Java in a single file of library code. An automated embedded alternative to Certbot and docker-sidecars. No JVM restart is needed on certificate update.
     
    Security
    1.1k
    This project aims to deobfuscate most commercially-available obfuscators for Java.
    java-deobfuscator This project aims to deobfuscate most commercially-available obfuscators for Java.
     
    Security
    1.3k
    CFR - Another Java Decompiler \o/
    leibnitz27 This is the public repository for the CFR Java decompiler
     
    Security
    31
    Test-Driven Security
    eleftherias Test-Driven Security Run tests ./gradlew test References Spring Security test support https://docs.spring.io/spring-security/site/docs/current/referen
     
    Security
    255
    FIDO2(WebAuthn) server officially certified by FIDO Alliance and Relying Party examples.
    line FIDO (Fast IDentity Online) is an open standard for online authentication. It is designed to solve the password problems stemming from a lot of security problems as we are suffering today.