daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update springboot-actuators-jolokia-xxe.yaml

patch-1
Ritik Chaddha 2022-07-28 14:05:26 +05:30
parent fc3776e6fd
commit 06adbe6447
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
vulnerabilities/springboot/springboot-actuators-jolokia-xxe.yaml
View File

@ -17,16 +17,17 @@ requests:
- "{{BaseURL}}/jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/nonexistent:31337!/logback.xml"
- "{{BaseURL}}/actuator/jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/random:915!/logback.xml"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- "http:\\/\\/nonexistent:31337\\/logback.xml"
- "reloadByURL"
- "JoranException"
condition: and
condition: and
- type: status
status:
- 200