AWVS14 Update

InfO

• 本仓库及相关资源仅供个人测试，请勿用于非法用途
• This warehouse and related resources are for personal testing only, please do not use them for illegal purposes
• Version 14 build 14.6.211215172 for Windows, Linux and macOS – 16th December 2021

New Vulnerability Checks

• Apache Log4j RCE vulnerabilty check updated to detect the vulnerability in web server exceptions
• Apache Log4j RCE vulnerabilty check updated to execute on various HTTP Headers

Updates

• Updated the scanner to test custom headers used by the web application

Use

docker run -it -d \
--name awvs \
-p 3443:3443 \
--restart=always \
ghcr.io/xrsec/awvs:latest

Edit HOSTS

sudo vi /etc/hosts
192.168.0.1	awvs.lan

RootCA 「must」

Downlaod && Install RootCA.cer

Visit Web

URL: https://awvs.lan:3443/#/login
UserName: awvs@awvs.com
PassWord: Awvs@awvs.com

---

Latest 14.6.211213163

New Vulnerability Checks

• New check for Apache Log4j RCE (CVE-2021-44228)

XRSec has the right to modify and interpret this article. If you want to reprint or disseminate this article, you must ensure the integrity of this article, including all contents such as copyright notice. Without the permission of the author, the content of this article shall not be modified or increased or decreased arbitrarily, and it shall not be used for commercial purposes in any way