{"blog_url":"https://briteming.hatenablog.com/","url":"https://briteming.hatenablog.com/entry/2023/04/26/025159","published":"2023-04-26 02:51:59","provider_name":"Hatena Blog","author_name":"briteming","version":"1.0","image_url":"https://dkh9ehwkisc4.cloudfront.net/static/files/80e52a5b-7d72-44c2-8187-76a2a58f5657-demo.png","height":"190","blog_title":"blog.hatena.ne.jp, \u5206\u7c7b: https://briteming.hatenablog.com/categories","width":"100%","provider_url":"https://hatena.blog","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fbriteming.hatenablog.com%2Fentry%2F2023%2F04%2F26%2F025159\" title=\"Log4j\u6f0f\u6d1e\u626b\u63cf\u7a0b\u5e8f-Log4j Scanner - blog.hatena.ne.jp, \u5206\u7c7b: https://briteming.hatenablog.com/categories\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","type":"rich","title":"Log4j\u6f0f\u6d1e\u626b\u63cf\u7a0b\u5e8f-Log4j Scanner","description":"Log4j Scanner\u662f\u7f8e\u56fd\u7f51\u7edc\u5b89\u5168\u548c\u57fa\u7840\u8bbe\u65bd\u5b89\u5168\u5c40 (CISA)\u53d1\u5e03\u7684 Log4j\u6f0f\u6d1e\u5f00\u6e90\u626b\u63cf\u7a0b\u5e8f\u3002\u8be5\u7a0b\u5e8f\u53ef\u8bc6\u522blog4j \u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e (CVE-2021-44228 & CVE-2021-45046) \u7684 Web \u670d\u52a1\u3002 \u8be5\u626b\u63cf\u7a0b\u5e8f\u7684\u57fa\u4e8e\u4ee5\u4e0b\u5f00\u6e90\u9879\u76ee\uff1a log4-scanner \u2013 Log4j \u6f0f\u6d1e\u626b\u63cf\u6846\u67b6\u3002 dns \u2013 Python \u4e2d\u7684\u7b80\u5355 DNS \u670d\u52a1\u5668\uff08UDP \u548c TCP\uff09\u3002 ldap \u2013 \u5305\u542b\u6709\u7528\u7684\u4ee3\u7801\u6765\u6d4b\u8bd5 lookup() \u8c03\u7528\u3002 \u4e3b\u8981\u7279\u6027\uff1a \u652f\u6301\u7edf\u4e00\u8d44\u6e90\u5b9a\u4f4d\u7b26\uff08URL\uff09\u5217\u8868\u3002 \u53ef\u5bf9 60 \u591a\u4e2a HTTP \u8bf7\u6c42\u6807\u5934\u5c55\u5f00\u6a21\u7cca\u6d4b\u8bd5\u3002 \u53ef\u5bf9 HTTP POST \u6570\u636e\u53c2\u6570\u5f00\u2026","categories":["python","\u5b89\u5168"],"author_url":"https://blog.hatena.ne.jp/briteming/"}