Ross ROSS = Recommend OSS · open-source software intelligence for agents

cisagov/log4j-scanner

log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities. observed · 2026-08-28

github.com/cisagov/log4j-scanner · Java · archived observed · 2026-08-28

Health v2 · maintenance only

10/100

  • Activity 0
  • Release rhythm 35
  • Longevity 100

Flags: no_releases archived no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 1716
  • days_rel: n/a
  • days_push: 1366
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1278 stars · 208 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A CISA-derived scanner for detecting web services vulnerable to the Log4Shell remote code execution vulnerabilities (CVE-2021-44228 and CVE-2021-45046). It probes endpoints with Log4j payloads and detects callbacks via self-hosted DNS logging or services like Interact.sh and Canarytokens.

Use cases

  • scan web services for log4shell vulnerability
  • check if my servers are affected by CVE-2021-44228
  • detect log4j RCE in web applications
  • find vulnerable log4j endpoints across a network
  • test web apps for CVE-2021-45046 exploitation

When to choose

  • auditing systems during the Log4Shell incident response window
  • needing a community-vetted scanner endorsed by CISA
  • wanting DNS-based out-of-band detection of exploitation callbacks

When to avoid

  • needing ongoing maintenance or updates - the repo is archived as of December 2022
  • requiring a guaranteed true-positive scanner - false negatives may occur
  • scanning systems you do not own or lack authorization to test

Facets

cli-tool · maturity abandoned

security vulnerability-scanning penetration-testing http-client security penetration-testing developer-tools cli cross-platform python jvm log4shell cve-2021-44228 cve-2021-45046 cisa vulnerability-scanner dns-callback archived

1 source

Member repositories

RepositoryRoleHealth v2
cisagov/log4j-scannermain10

For agents

markdown · JSON · MCP: product_card(name="cisagov/log4j-scanner")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem