New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Hashes required? #9

Closed

c0debreaker opened this issue Dec 17, 2021 · 3 comments

c0debreaker commented Dec 17, 2021

Do I need hashes for it to work? If so, where can I download them?

Owner

rubo77 commented Dec 17, 2021

We did not include an actual URL, this exercise is left to the reader, as they say:

The information Lunasec.io has put out about hashes of vulnerable binary Java .class files:

https://github.com/lunasec-io/lunasec/blob/master/tools/log4shell/constants/vulnerablehashes.go

Also see their blog: https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide/

rubo77 closed this as completed

Author

c0debreaker commented Dec 18, 2021

Thank you rubo!

Owner

rubo77 commented Dec 19, 2021

Anyway, I added an example string now to the bash script

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment