Skip to content

javasec/log4j-patch

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commit
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Log4j修改jar字节码补丁工具

该项目采用了字节码技术实现了对log4j jar和SpringBoot jar的漏洞修复,运行补丁后会动态修改log4j jar包中的org/apache/logging/log4j/core/lookup/JndiLookup.class类的lookup方法,并返回null对象。

如下图:

image-20211210184738712

使用方式

java -jar log4j-patch.jar [jar路径],如:java -jar log4j-patch.jar /data/log4j-core-2.12.1.jar,或者java -jar log4j-patch.jar /data/springboot-test.jar

About

log4j-patch 修改字节码实现补丁防御

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages