nuclei-templates/http/exposures/configs/jkstatus-manager.yaml

id: jkstatus-manager

info:
  name: JK Status Manager - Detect
  author: pdteam,DhiyaneshDk
  severity: low
  description: |
    Exposed JKStatus manager which is a web-based tool that allows administrators to monitor and manage the connections between the Apache HTTP Server and the Tomcat application server.
  reference:
    - https://github.com/PortSwigger/j2ee-scan/blob/master/src/main/java/burp/j2ee/issues/impl/JKStatus.java
  metadata:
    verified: true
    max-request: 8
    shodan-query: html:"JK Status Manager"
  tags: config,jk,status,exposure

http:
  - method: GET

    headers:
      X-Forwarded-For: "127.0.0.1"
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/status"
      - "{{BaseURL}}/jkstatus"
      - "{{BaseURL}}/jkstatus-auth"
      - "{{BaseURL}}/jk-status"
      - "{{BaseURL}}/jkmanager"
      - "{{BaseURL}}/jkmanager-auth"
      - "{{BaseURL}}/jdkstatus"

    stop-at-first-match: true
    matchers:
      - type: word
        words:
          - "JK Status Manager"
# digest: 490a0046304402205bc0be4fe64354ab625e609d9b1de733811c19aee5c839064f3ee13fe5f1a9d702206e4a116fd9cd36ff0920b8589a6fdbb374ed0d8537cfeaf33faf2e63d21f1d3a:922c64590222798bb761d5b6d8e72950
Addded JK Status Manager 2020-04-21 10:32:32 +00:00			`id: jkstatus-manager`

			`info:`
updated path 2023-02-09 04:55:47 +00:00			`name: JK Status Manager - Detect`
Additional Endpoints Added JKStatus Manager 2023-02-07 21:26:36 +00:00			`author: pdteam,DhiyaneshDk`
Addded JK Status Manager 2020-04-21 10:32:32 +00:00			`severity: low`
format update 2023-12-29 09:53:08 +00:00			`description: \|`
			`Exposed JKStatus manager which is a web-based tool that allows administrators to monitor and manage the connections between the Apache HTTP Server and the Tomcat application server.`
Additional Endpoints Added JKStatus Manager 2023-02-07 21:26:36 +00:00			`reference:`
			`- https://github.com/PortSwigger/j2ee-scan/blob/master/src/main/java/burp/j2ee/issues/impl/JKStatus.java`
			`metadata:`
boolean format update 2023-06-04 08:13:42 +00:00			`verified: true`
templateman update 2023-10-14 11:27:55 +00:00			`max-request: 8`
Additional Endpoints Added JKStatus Manager 2023-02-07 21:26:36 +00:00			`shodan-query: html:"JK Status Manager"`
add exposure tag to templates in http/exposures 2023-06-02 23:20:14 +00:00			`tags: config,jk,status,exposure`
Addded JK Status Manager 2020-04-21 10:32:32 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Addded JK Status Manager 2020-04-21 10:32:32 +00:00			`- method: GET`
templateman update 2023-10-14 11:27:55 +00:00
Addded JK Status Manager 2020-04-21 10:32:32 +00:00			`headers:`
			`X-Forwarded-For: "127.0.0.1"`
Update syntax 2020-05-25 08:02:27 +00:00			`path:`
Additional Endpoints Added JKStatus Manager 2023-02-07 21:26:36 +00:00			`- "{{BaseURL}}"`
			`- "{{BaseURL}}/status"`
			`- "{{BaseURL}}/jkstatus"`
			`- "{{BaseURL}}/jkstatus-auth"`
			`- "{{BaseURL}}/jk-status"`
			`- "{{BaseURL}}/jkmanager"`
			`- "{{BaseURL}}/jkmanager-auth"`
			`- "{{BaseURL}}/jdkstatus"`

			`stop-at-first-match: true`
Addded JK Status Manager 2020-04-21 10:32:32 +00:00			`matchers:`
			`- type: word`
Update syntax 2020-05-25 08:02:27 +00:00			`words:`
Additional Endpoints Added JKStatus Manager 2023-02-07 21:26:36 +00:00			`- "JK Status Manager"`
Auto Template Signing [Fri Dec 29 09:57:30 UTC 2023] :robot: 2023-12-29 09:57:30 +00:00			`# digest: 490a0046304402205bc0be4fe64354ab625e609d9b1de733811c19aee5c839064f3ee13fe5f1a9d702206e4a116fd9cd36ff0920b8589a6fdbb374ed0d8537cfeaf33faf2e63d21f1d3a:922c64590222798bb761d5b6d8e72950`