Log4jPatcher
A Java Agent based mitigation for Log4j2 JNDI exploits.
This agent employs 2 patches:
- Disabling all Lookup conversions (on supported Log4j versions) in
org.apache.logging.log4j.core.pattern.MessagePatternConverterby settingnoLookupsto true in the constructor. - Disabling the
org.apache.logging.log4j.core.lookup.JndiLookupclass by just returningnullin itslookupfunction.
To use
Add -javaagent:Log4jPatcher.jar as a JVM argument.
More information on this CVE and it's impact is available at CreeperBlog (creeperhost.net)
The Log4JPatcher Team
Owner
