check if any JVMs in kubernetes cluster are vulnerable to log4shell CVE-2021-44228. only checks java versions for those exploitable using the initial exploit. be aware that there are other exploits that can work on any java version.

100%

check if any JVMs in kubernetes cluster are vulnerable to log4shell CVE-2021-44228. only checks java versions for those exploitable using the initial exploit. be aware that there are other exploits that can work on any java version.

✓ Published0🌍 Public

Last edited Dec 15, 2021

Created on Dec 13, 2021

This visualization scans every pod in a Kubernetes cluster to determine whether its JVM version is vulnerable to CVE-2021-44228 (Log4Shell). It shows a tabular output of pod namespace, name, container, Java version, and a boolean vulnerability flag, skipping pods that have succeeded or lack the Java executable. The script uses the Kubernetes Python client’s `CoreV1Api` to list pods and `connect_get_namespaced_pod_exec` with a streaming response to run `java -version` in each container, parsing the stderr with regex to extract version numbers. It applies a hard-coded threshold check for Java 6, 7, 8, and 11 versions, explicitly noting that only the initial exploit vector is covered.

AI-generated description

Similar vizzes

Loading thumbnail…

patch all deployments and stateful sets containers in your kubernetes cluster for log4shell CVE-2021-44228 by appending environment variable that prevents the exploit. .

This example demonstrates a Kubernetes remediation script that scans all deployments and stateful sets across every namespace, appending the `LOG4J_FORMAT_MSG_NO_LOOKUPS=true` environment variable to any container lacking it, thereby mitigating the log4shell CVE-2021-44228 exploit. The code uses the official `kubernetes` Python client, loading the kubeconfig via `config.load_kube_config()` and leveraging `AppsV1Api` to list and patch resources with `list_deployment_for_all_namespaces()` and `patch_namespaced_deployment()`. It iterates through each app, checks existing environment variables for the marker, and only applies patches when changes are required, printing progress and error messages for each modified workload.

Aaharonh

65% match

Loading thumbnail…

JDK8 command line download script; For JDK10, please check: https://gist.github.com/P7h/9741922

This shell script automates the download of Oracle JDK8 binaries for multiple platforms, including Windows, Linux, macOS, Solaris, and ARM architectures, from a single base URL. It defines an array of platform-specific file suffixes and iterates through them, invoking `curl` with the `-C -` resume flag, `-L` for redirects, `-R` to preserve remote timestamps, and the `Cookie: oraclelicense=accept-securebackup-cookie` header to accept Oracle’s license terms. The script also includes a commented list of earlier JDK8 versions for reference.

PP7h

49% match

Loading thumbnail…

JDK 7 command line download script; For JDK8, please check: https://gist.github.com/P7h/9741922

This example shows a shell script that automates the download of multiple JDK 7 platform-specific packages from Oracle’s website. It defines a base URL for JDK 7u79 and iterates over an array of file suffixes, using `wget` with `--no-check-certificate` and a cookie header to accept the Oracle license. The script also comments alternative versions and a `curl` command for JDK8.

PP7h

47% match

Loading thumbnail…

JDK Download script [earlier version] -- NOT maintaining this anymore. Please check: https://gist.github.com/P7h/9741922

This example presents a shell script that automates downloading various JDK 8 and JDK 7 distributions and documentation from Oracle’s servers. It shows how to use `wget` with the `--no-check-certificate`, `--no-cookies`, and `--header` flags to pass the required `oraclelicense=accept-securebackup-cookie` cookie, bypassing Oracle’s license acceptance. The script targets multiple versions (8u25 through 8.0) and platforms including Windows x64/i586 and Linux x64/i586, and also fetches Java tutorials zips. It is an earlier, unmaintained version, with the code referencing a newer gist.

PP7h

46% match

Loading thumbnail…

JDK9 command line download script; For JDK10, please check: https://gist.github.com/P7h/9741922

This example provides a shell script that automates the download of Oracle JDK 9 binaries from the Oracle website using command-line tools. The script defines a base URL for JDK 9.0.4 and a list of platform-specific files, including Linux tar archives, Windows executables, and API documentation. It uses `curl` with options like `-C -` for resuming interrupted downloads, `-L` for redirects, `-R` for timestamping, and `-O` (implied) with a cookie header to accept the Oracle license. The script also includes commented-out alternatives using `wget`, and documents its purpose for environments like Amazon EC2.

PP7h

46% match

Loading thumbnail…

Script to download JDK / JRE / Java binaries from Oracle website from terminal / shell / command line / command prompt

This example shows a collection of Bash scripts for downloading Oracle JDK/JRE binaries from the Oracle website via the terminal. It demonstrates how to automate fetching multiple platform-specific packages (Linux, Windows, macOS) and documentation in a single invocation using `curl` or `wget`. The scripts use `wget` with options like `-c` for resuming interrupted downloads and `--header` to pass the required Oracle license cookie, while `curl` variants employ `-C -` for continuation, `-L` for redirects, and `-O` for remote filenames. The code includes version-specific base URLs for JDK 8, 9, and 10, along with commented notes on command-line flags.

PP7h

45% match

Loading thumbnail…

docker warnings from docker info

This visualization parses the text output of `docker info` to surface deprecation and kernel-support warnings as a small, interactive network. It shows each warning as a node, with related messages grouped by their underlying subsystem (memory, CPU, storage). The layout uses `d3.forceSimulation` to position nodes, with collision detection and link forces to keep clusters readable. Data comes from the raw `docker_warnings.txt` file, which is fetched and split into lines, then mapped to nodes and edges based on keyword matching. Hovering highlights a node’s immediate neighbors, while the color encodes warning type—storage warnings appear in red, kernel-capability issues in orange. No animation or temporal data is present; the view is static except for the hover interaction.

UUtopiah

44% match

Loading thumbnail…

Gist 7ea7490cb95fe21dfad10572a1c8244f

This example visualizes the process of checking and updating the UPX executable packer to its latest release version. It shows a shell-script-driven workflow that queries the GitHub API for the newest release tag, compares it to the locally installed version, and either reports the tool is up to date or proceeds to download, compile, and install the source tarball. The code relies on standard command-line utilities (`curl`, `jq`, `tar`, `make`) and directly parses version strings, without any graphical or interactive rendering libraries. The rendering approach is purely textual terminal output, with no data visualization beyond status messages.

HHerst

43% match