From 333797b1978b86790229ff4804590ef156a11776 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Wed, 8 Feb 2023 12:01:32 +0530 Subject: [PATCH] Create struts-showcase.yaml --- misconfiguration/struts-showcase.yaml | 30 +++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 misconfiguration/struts-showcase.yaml diff --git a/misconfiguration/struts-showcase.yaml b/misconfiguration/struts-showcase.yaml new file mode 100644 index 0000000000..6844db56c6 --- /dev/null +++ b/misconfiguration/struts-showcase.yaml @@ -0,0 +1,30 @@ +id: struts-showcase + +info: + name: Apache Struts - ShowCase Application Exposure + author: DhiyaneshDK + severity: low + reference: + - https://github.com/PortSwigger/j2ee-scan/blob/master/src/main/java/burp/j2ee/issues/impl/ApacheStrutsWebConsole.java + metadata: + verified: "true" + shodan-query: title:"Struts2 Showcase" + tags: apache,struts,showcase,misconfig,exposure + +requests: + - method: GET + path: + - '{{BaseURL}}' + - '{{BaseURL}}/struts2-showcase/showcase.action' + + stop-at-first-match: true + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'Struts2 Showcase' + + - type: status + status: + - 200