Cybersecurity and Infrastructure Security Agency (CISA) 是美国的网络安全部分,最近开源了一个 log4 漏洞扫描工具:
log4j-scanner is a project derived from other members of the open-source community by CISA's Rapid Action Force team to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.
开源地址:log4j-scanner