pwn-sast-log4j

Drive PWN::SAST::Log4J from pwn_eval.

SKILL.md

GitHub

PWN::SAST::Log4J

SAST Module used to identify command execution residing within Java source code.

When to use

Call PWN::SAST::Log4J from pwn_eval when the task needs this module. Do not reimplement it in shell.

Methodologies

Generated from pwn/sast/log4j.rb. Prefer the public class methods below. Class methods take (opts = {}) and read opts.

How to call

PWN::SAST::Log4J.help
PWN::SAST::Log4J.scan(opts)

Public methods

  • scan
  • security_references
  • authors
  • help

References

  • references/security.md — CWE / NIST mapping
  • references/urls.md — URLs from source

Source

pwn/sast/log4j.rb

Verification

PWN::SAST::Log4J.respond_to?(:scan) after the module is loaded. Read the source for parameter names.

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061