How to use nmap port scanner to scan for Log4j/Log4shell security vulnerability

Subject: How to use nmap port scanner to scan for Log4j/Log4shell security vulnerability

Good day from Singapore,

I have Ubuntu 21.10 Linux installed as a virtual machine under Oracle VM VirtualBox 6.1. Host operating system is Windows 10 Pro.

But, I want to use this Ubuntu 21.10 Linux as a Hyper-V virtual machine under Windows Server 2019. 

In this case, you need to convert VirtualBox VMDK virtual harddisk into Hyper-V VHDX virtual harddisk.

You can use the follow guide.

Reference guide: How to Migrate VirtualBox VMs to Windows 10 Hyper-V

Link: https://www.groovypost.com/howto/migrate-virtual-box-vms-windows-10-hyper-v/

After you have finished converting VirtualBox VMDK into Hyper-V VHDX, you can now import the virtual machine into Windows Server 2019 Hyper-V. I shall not cover the details here. The important point is you must create a new virtual switch in Hyper-V Manager with an 'External" connection.

When you try to start the Hyper-V virtual machine, you will encounter the following error.

Hyper-V Boot Error: The Image’s Hash and Certificate Are not Allowed

The solution is to turn off Secure Boot in Hyper-V Manager. Use the following guide.

Reference guide: Hyper-V Boot Error: The Image’s Hash and Certificate Are not Allowed

Link: http://woshub.com/hyper-v-boot-error-images-hash-certificate-not-allowed/

After you have successfully started Ubuntu 21.10 Linux virtual machine in Hyper-V, proceed to install nmap port scanner.

$ sudo apt install nmap

Now, download the Nmap NSE scripts to scan for Log4j vulnerability.

$ sudo apt install git

$ git clone https://github.com/Diverto/nse-log4shell.git

$ cd nse-log4shell

Use the following Linux command to scan for Log4j vulnerability.

$ nmap -sV -T4 -v --script=$PWD/ <IP address of target machine to scan>

Mr. Turritopsis Dohrnii Teo En Ming, 43 years old as of 19 Dec 2021, is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant with a Systems Integrator (SI)/computer firm in Singapore. He is an IT enthusiast.

REFERENCES

===========

[1] https://pastebin.com/raw/XCaiLGdr