Re: Log4j issue - search script update...

[Jack Woehr <jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx>]

DR2, here's what I posted earlier today:

$ cd / $ for i in `find . | grep log4j | grep '\.jar$'`; do echo $i; jar tf
$i | grep -i jndi; done # Looks for any log4j jar and prints name then
looks to see if it contains a class with the string "jndi" in any mixture
of case
$ for i in `find . | grep '\.ear$`; do echo $i ; jar tf $i | grep -i log4j;
done
# Looks for any .ear file that contains a log4j jar ... if you see "log4j"
appear, unpack that .ear using jar -xf filename.ear in a temp dir and
examine the log4j* jar
$ for i in `find . | grep '\.war$`; do echo $i ; jar tf $i | grep -i log4j;
done
# Looks for any .war file that contains a log4j jar ... if you see "log4j"
appear, unpack that .war using jar -xf filename.war in a temp dir and
examine the log4j* jar

On Tue, Dec 14, 2021 at 12:49 PM <dr2@xxxxxxxx> wrote:

> Jack,
>
> ACK.  I'm just running with the latest I have.  When I find a better
> mouse traps I'll use them and pass them along...