diff --git a/misconfiguration/struts-ognl-console.yaml b/misconfiguration/struts-ognl-console.yaml new file mode 100644 index 0000000000..2dfa4d417b --- /dev/null +++ b/misconfiguration/struts-ognl-console.yaml @@ -0,0 +1,31 @@ +id: struts-ognl-console + +info: + name: Apache Struts - OGNL Console + author: DhiyaneshDK + severity: unknown + description: | + This development console allows the evaluation of OGNL expressions that could lead to Remote Command Execution + remediation: Restrict access to the struts console on the production server + reference: + - https://github.com/PortSwigger/j2ee-scan/blob/master/src/main/java/burp/j2ee/issues/impl/ApacheStrutsWebConsole.java + metadata: + verified: "true" + shodan-query: html:"Struts Problem Report" + tags: apache,struts,ognl,panel + +requests: + - method: GET + path: + - '{{BaseURL}}/struts/webconsole.html?debug=console' + + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'Welcome to the OGNL console!' + + - type: status + status: + - 200