Forum Discussion

CarloMun's avatar
CarloMun
Icon for Nimbostratus rankNimbostratus
Dec 19, 2021

Log4j iRule mitigation as described in K59329043 - which encoding is the regex using ?

Hi Community,   just for my understanding - can someone please clarify which encoding is being used in the regex with F5 release under K59329043 in order to mitigate log4j CVEs exploits ?   I...
announcement
iRules
LTM
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Dec 19, 2021

Hi ,

 

the regex will search for some possible variants and obfuscations of the well-known string that is used to exploit the log4shell vulnerability.

Paste the full string without the {} here: https://regex101.com/.

You will get an awesome explanation with syntax highlighting.

 

KR

Daniel

  • L__G_'s avatar
    L__G_
    Icon for Altostratus rankAltostratus
    Jan 11, 2022

    Hello

     

    Another great site for regex visualisation : regexper.com

     

    Copy paste the F5 regex without the {} and (?i).