Coder Social home page Coder Social logo

Comments (14)

zangcc avatar zangcc commented on August 19, 2024 1

作者你好。BurpSuite java版本正确,本地Java版本正确,log4j bp插件版本正确。但是还是没有反应,插件功能无效。

image

image

image

配置也没有问题:

image

from log4j2burpscanner.

f0ng avatar f0ng commented on August 19, 2024

也可以去FAQ查看

from log4j2burpscanner.

f0ng avatar f0ng commented on August 19, 2024

收到反馈,也可能与burp的插件有冲突,如HAE

from log4j2burpscanner.

Ny4nts avatar Ny4nts commented on August 19, 2024

作者你好,jdk版本是1.8_231但是无法导入插件。请问您用的是那个版本的bp呢?(我用的是2.0.11)

from log4j2burpscanner.

f0ng avatar f0ng commented on August 19, 2024

burp版本是2021.5.1,这个首选看启动bp的版本,其次再看Extender里设置的jdk版本

from log4j2burpscanner.

Ny4nts avatar Ny4nts commented on August 19, 2024

谢谢作者回复,目前问题已经解决了。:)

from log4j2burpscanner.

f0ng avatar f0ng commented on August 19, 2024

可以去burplogger模块查看扫描记录,有漏洞的才会在插件页面显示

from log4j2burpscanner.

hellowchen avatar hellowchen commented on August 19, 2024

作者大大,问一下用自己ceye平台收到了dns请求,但插件没有检测出漏洞,是什么问题。用的是0.21.0jdk14的版本。自己的bp用的是java15.

from log4j2burpscanner.

f0ng avatar f0ng commented on August 19, 2024

可以参考这里4-为什么有些站点检测不出来?

from log4j2burpscanner.

hellowchen avatar hellowchen commented on August 19, 2024

好的,谢谢作者

from log4j2burpscanner.

f0ng avatar f0ng commented on August 19, 2024

但是还是没有反应,插件功能无效是什么意思,没扫描?看了logger吗

from log4j2burpscanner.

zangcc avatar zangcc commented on August 19, 2024

@f0ng Logger是有记录的,而且ceye也接收到了dns数据,就是插件没有显示结果,我试过右键Send to log4i2 Scanner也是空白,但是漏洞是真实存在。

image

from log4j2burpscanner.

f0ng avatar f0ng commented on August 19, 2024

参考4-为什么有些站点检测不出来?

from log4j2burpscanner.

f0ng avatar f0ng commented on August 19, 2024

怀疑插件功能无效首先要排除其他因素,可以自己搭建一个内网dnslog在内网进行测试,文章https://mp.weixin.qq.com/s/NJ3gocQ_LojYlJk_0yWm6A

from log4j2burpscanner.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.