Create jboss-jbpm-admin.yaml

patch-1
Dhiyaneshwaran 2023-02-08 02:04:55 +05:30 committed by GitHub
parent f1c5c2eeb8
commit d92c9178ba
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 28 additions and 0 deletions

View File

@ -0,0 +1,28 @@
id: jboss-jbpm-admin
info:
name: JBoss jBPM Admin Console
author: DhiyaneshDK
severity: info
reference:
- https://github.com/PortSwigger/j2ee-scan/blob/master/src/main/java/burp/j2ee/issues/impl/JBossjBPMAdminConsole.java
metadata:
verified: "true"
shodan-query: html:"JBossWS"
tags: jboss,panel,login
requests:
- method: GET
path:
- '{{BaseURL}}/jbpm-console/app/tasks.jsf'
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<title>JBoss jBPM Administration Console</title>'
- type: status
status:
- 200