Post

When log4j vulns appeared, I wrote an app that recursively searched .zip/.war/ear/.jar files in memory for a specified regex. (…or just recursively show you all the files in each). I've been using it recently to inventory all my backups and it was so useful I'm considering renaming it.

evil.red

@evil.red

It was born out of urgency, but is now useful for other things. Should I rename it to something not tied to jndi / log4j / java? I now have github workflows automatically building static binaries which should run on any Linux distro. github.com/redvers/jndi... #infosec

github.comGitHub - redvers/jndi-file-scanner: CLI Tool to help identify vulnerable java artifactsCLI Tool to help identify vulnerable java artifacts - redvers/jndi-file-scanner

7/9/25, 10:23 pm0 reposts0 likes

No replies yet.