nuclei-templates/misconfiguration/springboot/springboot-mappings.yaml

33 lines
751 B
YAML
Raw Normal View History

2021-01-28 17:43:50 +00:00
id: springboot-mappings
info:
name: Detect Springboot Mappings Actuator
author: that_juan_ & dwisiswant0 & wdahlenb
2021-01-28 15:56:38 +00:00
severity: low
description: Additional routes may be displayed
requests:
- method: GET
path:
- "{{BaseURL}}/mappings"
- "{{BaseURL}}/actuator/mappings"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "mappings"
- "method"
- "produces"
condition: and
- type: status
status:
- 200
- type: word
words:
- "application/json"
- "application/vnd.spring-boot.actuator"
2021-01-28 15:56:38 +00:00
- "application/vnd.spring-boot.actuator.v1+json"
condition: or
part: header