2020-04-21 10:32:32 +00:00
id : jkstatus-manager
info :
2023-02-09 04:55:47 +00:00
name : JK Status Manager - Detect
2023-02-07 21:26:36 +00:00
author : pdteam,DhiyaneshDk
2020-04-21 10:32:32 +00:00
severity : low
2023-12-29 09:53:08 +00:00
description : |
Exposed JKStatus manager which is a web-based tool that allows administrators to monitor and manage the connections between the Apache HTTP Server and the Tomcat application server.
2023-02-07 21:26:36 +00:00
reference :
- https://github.com/PortSwigger/j2ee-scan/blob/master/src/main/java/burp/j2ee/issues/impl/JKStatus.java
metadata :
2023-06-04 08:13:42 +00:00
verified : true
2023-10-14 11:27:55 +00:00
max-request : 8
2023-02-07 21:26:36 +00:00
shodan-query : html:"JK Status Manager"
2023-06-02 23:20:14 +00:00
tags : config,jk,status,exposure
2020-04-21 10:32:32 +00:00
2023-04-27 04:28:59 +00:00
http :
2020-04-21 10:32:32 +00:00
- method : GET
2023-10-14 11:27:55 +00:00
2020-04-21 10:32:32 +00:00
headers :
X-Forwarded-For : "127.0.0.1"
2020-05-25 08:02:27 +00:00
path :
2023-02-07 21:26:36 +00:00
- "{{BaseURL}}"
- "{{BaseURL}}/status"
- "{{BaseURL}}/jkstatus"
- "{{BaseURL}}/jkstatus-auth"
- "{{BaseURL}}/jk-status"
- "{{BaseURL}}/jkmanager"
- "{{BaseURL}}/jkmanager-auth"
- "{{BaseURL}}/jdkstatus"
stop-at-first-match : true
2020-04-21 10:32:32 +00:00
matchers :
- type : word
2020-05-25 08:02:27 +00:00
words :
2023-02-07 21:26:36 +00:00
- "JK Status Manager"
2023-10-20 11:41:13 +00:00
# digest: 4b0a00483046022100fb9a49e044929222a0a7bf7e45d32dc24c142324f769a1d53e1c7d698dd834ea022100bd3066f986a2ae6536450a05092b8164e0c0d241af46bfafbecdf12c3f709900:922c64590222798bb761d5b6d8e72950
