nuclei-templates/misconfiguration/springboot/springboot-mappings.yaml

34 lines
777 B
YAML
Raw Normal View History

2021-01-28 17:43:50 +00:00
id: springboot-mappings
info:
name: Detect Springboot Mappings Actuator
2021-06-09 12:20:56 +00:00
author: that_juan_,dwisiswant0,wdahlenb
2021-01-28 15:56:38 +00:00
severity: low
description: Additional routes may be displayed
2021-05-14 14:07:13 +00:00
tags: springboot,disclosure
requests:
- method: GET
path:
- "{{BaseURL}}/mappings"
- "{{BaseURL}}/actuator/mappings"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "mappings"
- "method"
- "produces"
condition: and
- type: status
status:
- 200
- type: word
words:
- "application/json"
- "application/vnd.spring-boot.actuator"
2021-01-28 15:56:38 +00:00
- "application/vnd.spring-boot.actuator.v1+json"
condition: or
part: header