https://www.haguest.com/tags/java/Recent content in Java on Cliff HultsHugo -- gohugo.ioen© 2026 Cliff HultsThu, 16 Dec 2021 14:59:43 -0500https://www.haguest.com/posts/2021-12-16-log4j/Thu, 16 Dec 2021 14:59:43 -0500https://www.haguest.com/posts/2021-12-16-log4j/<p>Lately, everyone has been talking about Log4Shell (CVE-2021-44228) and likely, if you&rsquo;re reading this, you&rsquo;re looking for info for what to do. Most people attempted to utilize <a href="https://log4shell.huntress.com/" target="_blank" rel="noreferrer">Huntress&rsquo;s Log4Shell detection tool</a> to show connections to a LDAP server they were hosting. Some people had issues with this as it was overburdened with requests (rightfully so) or didn&rsquo;t want to, or aren&rsquo;t allowed to send outbound traffic to a server they didn&rsquo;t own. At our organization, we were part of the latter group. In order to comply with our rules, we needed to find a reliable way to scan our devices for the vulnerability and look for requests to a domain that we owned.</p>