nuclei-templates/http/exposures/configs/jkstatus-manager.yaml

id: jkstatus-manager

info:
  name: JK Status Manager - Detect
  author: pdteam,DhiyaneshDk
  severity: low
  description: |
    Exposed JKStatus manager which is a web-based tool that allows administrators to monitor and manage the connections between the Apache HTTP Server and the Tomcat application server.
  reference:
    - https://github.com/PortSwigger/j2ee-scan/blob/master/src/main/java/burp/j2ee/issues/impl/JKStatus.java
  classification:
    cpe: cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 8
    vendor: apache
    product: tomcat
    shodan-query: html:"JK Status Manager"
  tags: config,jk,status,exposure

http:
  - method: GET

    headers:
      X-Forwarded-For: "127.0.0.1"
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/status"
      - "{{BaseURL}}/jkstatus"
      - "{{BaseURL}}/jkstatus-auth"
      - "{{BaseURL}}/jk-status"
      - "{{BaseURL}}/jkmanager"
      - "{{BaseURL}}/jkmanager-auth"
      - "{{BaseURL}}/jdkstatus"

    stop-at-first-match: true
    matchers:
      - type: word
        words:
          - "JK Status Manager"
# digest: 4a0a00473045022100aac9605ef93d7a5ddc413542c841e5cf56e3dddaa37d975ac01dcc8036114bf602206f4219fea126234482022af47159d0ab79433dbbd7647b750a13593ed3627eb7:922c64590222798bb761d5b6d8e72950
Addded JK Status Manager 2020-04-21 10:32:32 +00:00			`id: jkstatus-manager`

			`info:`
updated path 2023-02-09 04:55:47 +00:00			`name: JK Status Manager - Detect`
Additional Endpoints Added JKStatus Manager 2023-02-07 21:26:36 +00:00			`author: pdteam,DhiyaneshDk`
Addded JK Status Manager 2020-04-21 10:32:32 +00:00			`severity: low`
format update 2023-12-29 09:53:08 +00:00			`description: \|`
			`Exposed JKStatus manager which is a web-based tool that allows administrators to monitor and manage the connections between the Apache HTTP Server and the Tomcat application server.`
Additional Endpoints Added JKStatus Manager 2023-02-07 21:26:36 +00:00			`reference:`
			`- https://github.com/PortSwigger/j2ee-scan/blob/master/src/main/java/burp/j2ee/issues/impl/JKStatus.java`
Fix classification Fix classification 2024-09-10 09:08:16 +00:00			`classification:`
			`cpe: cpe:2.3:a:apache:tomcat::::::::`
Additional Endpoints Added JKStatus Manager 2023-02-07 21:26:36 +00:00			`metadata:`
boolean format update 2023-06-04 08:13:42 +00:00			`verified: true`
templateman update 2023-10-14 11:27:55 +00:00			`max-request: 8`
Add missing cpes Added missing cpes 2024-09-10 08:22:50 +00:00			`vendor: apache`
Fix classification Fix classification 2024-09-10 09:08:16 +00:00			`product: tomcat`
			`shodan-query: html:"JK Status Manager"`
add exposure tag to templates in http/exposures 2023-06-02 23:20:14 +00:00			`tags: config,jk,status,exposure`
Addded JK Status Manager 2020-04-21 10:32:32 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Addded JK Status Manager 2020-04-21 10:32:32 +00:00			`- method: GET`
templateman update 2023-10-14 11:27:55 +00:00
Addded JK Status Manager 2020-04-21 10:32:32 +00:00			`headers:`
			`X-Forwarded-For: "127.0.0.1"`
Update syntax 2020-05-25 08:02:27 +00:00			`path:`
Additional Endpoints Added JKStatus Manager 2023-02-07 21:26:36 +00:00			`- "{{BaseURL}}"`
			`- "{{BaseURL}}/status"`
			`- "{{BaseURL}}/jkstatus"`
			`- "{{BaseURL}}/jkstatus-auth"`
			`- "{{BaseURL}}/jk-status"`
			`- "{{BaseURL}}/jkmanager"`
			`- "{{BaseURL}}/jkmanager-auth"`
			`- "{{BaseURL}}/jdkstatus"`

			`stop-at-first-match: true`
Addded JK Status Manager 2020-04-21 10:32:32 +00:00			`matchers:`
			`- type: word`
Update syntax 2020-05-25 08:02:27 +00:00			`words:`
Additional Endpoints Added JKStatus Manager 2023-02-07 21:26:36 +00:00			`- "JK Status Manager"`
chore: sign templates 🤖 2024-09-12 05:14:01 +00:00			`# digest: 4a0a00473045022100aac9605ef93d7a5ddc413542c841e5cf56e3dddaa37d975ac01dcc8036114bf602206f4219fea126234482022af47159d0ab79433dbbd7647b750a13593ed3627eb7:922c64590222798bb761d5b6d8e72950`