cisagov/log4j-scanner
log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities. observed · 2026-08-28
Health v2 · maintenance only
10/100
- Activity 0
- Release rhythm 35
- Longevity 100
Flags: no_releases archived no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 1716
- days_rel: n/a
- days_push: 1366
- n_releases_24m: 0
Adoption not part of the score
1278 stars · 208 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A CISA-derived scanner for detecting web services vulnerable to the Log4Shell remote code execution vulnerabilities (CVE-2021-44228 and CVE-2021-45046). It probes endpoints with Log4j payloads and detects callbacks via self-hosted DNS logging or services like Interact.sh and Canarytokens.
Use cases
- scan web services for log4shell vulnerability
- check if my servers are affected by CVE-2021-44228
- detect log4j RCE in web applications
- find vulnerable log4j endpoints across a network
- test web apps for CVE-2021-45046 exploitation
When to choose
- auditing systems during the Log4Shell incident response window
- needing a community-vetted scanner endorsed by CISA
- wanting DNS-based out-of-band detection of exploitation callbacks
When to avoid
- needing ongoing maintenance or updates - the repo is archived as of December 2022
- requiring a guaranteed true-positive scanner - false negatives may occur
- scanning systems you do not own or lack authorization to test
Facets
cli-tool · maturity abandoned
security vulnerability-scanning penetration-testing http-client security penetration-testing developer-tools cli cross-platform python jvm log4shell cve-2021-44228 cve-2021-45046 cisa vulnerability-scanner dns-callback archived
1 source
- readme: https://github.com/cisagov/log4j-scanner · fetched 2026-08-28 · 29117941e675
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| cisagov/log4j-scanner | main | 10 |
For agents
markdown · JSON · MCP: product_card(name="cisagov/log4j-scanner")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem