log4shell.tools is a small set of defensive utilities for the Log4Shell vulnerability (CVE-2021-44228). The scanner flags JNDI exploitation attempts in your logs — even obfuscated ones — while the version checker tells you whether a given Log4j build is vulnerable and what to upgrade to. Detection only: nothing here executes payloads or contacts external hosts.
Below, our guides explain how Log4Shell works, how attackers obfuscate payloads, how to detect exploitation, and how to remediate for good.
Defensive by design
These tools exist to help defenders triage logs and inventory versions quickly during and after the Log4Shell crisis. They do not generate attack payloads. The scanner de-obfuscates Log4j lookup syntax purely to recognise hostile strings — it never resolves them.