daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Extract available endpoints from springboot-actuator (#4497) 

* Extract available endpoints from springboot-actuator

I updated the template "springboot-actuator.yaml" to contain a list of available endpoints in order to see and process endpoints and also recognize unusual non-standard endpoints that are exposed.

* Removed trailing spaces badly visible in web UI

* Added metadata

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
patch-1
dr0pd34d 2022-05-29 08:06:51 +00:00 committed by GitHub
parent 1205640037
commit ba9ac7d334
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
technologies/springboot-actuator.yaml
View File

@ -2,8 +2,10 @@ id: springboot-actuator
info: info:
name: Detect Springboot Actuators name: Detect Springboot Actuators
author: that_juan_,dwisiswant0,wdahlenb author: that_juan_,dwisiswant0,wdahlenb,dr0pd34d
severity: info severity: info
metadata:
shodan-query: http.favicon.hash:116323821
tags: tech,springboot,actuator tags: tech,springboot,actuator
requests: requests:
@ -29,3 +31,9 @@ requests:
name: "favicon" name: "favicon"
dsl: dsl:
- "status_code==200 && (\"116323821\" == mmh3(base64_py(body)))" - "status_code==200 && (\"116323821\" == mmh3(base64_py(body)))"
extractors:
- type: json
name: available-endpoints
json:
- .[] | to_entries | .[].key