log4j漏洞一鍵批量檢測【CVE-2021-44228】

• log4j批量檢測(CVE-2021-44228)

實現思路：

1、python讀取urls.txt所有應用資產

2、調用rad對urls頁面進行爬蟲

3、爬取到的數據包轉發到burp

4、使用burp的log4j插件對數據包所有字段進行POC探測

需要工具：

batch_rad.py

rad【https://github.com/chaitin/rad】

burp插件(log4jShell Scanner)【burp插件倉庫自帶】

batch_rad.py代碼如下：

import os
import time
import sys
import datetime

def globalPath():#文件路徑
    global radPath #rad
    global urlPath #url資產
    radPath = r"C:\Users\jues\Desktop\rad\rad.exe"
    urlPath = r"C:\Users\jues\Desktop\rad\urls.txt"

def getUrl(path):#獲取urls
    file = open(path)  
    urls = []
    for line in file:
        urls.append(line.strip('\n'))  # 移除換行符將url添加到數組
    file.close()
    return urls

def addFiles(pathName):#創建掃描報告文件夾
    try:
        filePath = sys.path[0] + "\\" + datetime.datetime.now().strftime('%Y.%m.%d-') + pathName  #D:\xxxx\xxxx\batch_scan\2020.11.11-scan_domains\
        os.mkdir(filePath)
    except:
        pass
    return filePath


def scan():#rad_burp聯動掃描
    urls = getUrl(urlPath)
    filePath = addFiles("scan_rad_burp\\")
    sum = 0
    for url in urls:
        sum += 1
        name = str(sum) + ',' + url.replace('https://', '').replace('http://','').replace('/','').replace('\n','').replace(':','-').rstrip() + '.txt' #創建的爬蟲文件名
        radcmd = r'{0} -t {1} --http-proxy 127.0.0.1:8080 -text-output {2}'.format(radPath, url.replace('\n', ''), filePath + name)  # cmd
        os.system(radcmd.replace('\n', ''))
        time.sleep(1)

if __name__ == "__main__":
    globalPath()
    scan()