Added Apache Tomcat Strack Trace Detection Template

patch-1
Lucky-Pulse 2023-11-08 16:41:16 +13:00
parent 602c67635d
commit e3022f6170
1 changed files with 23 additions and 0 deletions

View File

@ -0,0 +1,23 @@
id: tomcat-stacktraces
info:
name: Tomcat Stack Traces Enabled
author: lucky0x0d, PulseSecurity.co.nz
severity: info
description: |
Check to see if Tomcat stack traces are enabled using a known bad path
metadata:
max-request: 1
tags: tech,tomcat,apache
http:
- method: GET
path:
- '{{BaseURL}}/?f=\['
matchers:
- type: dsl
dsl:
- 'contains(tolower(body), "tomcat")'
- 'contains(tolower(body), "org.apache")'
- status_code == 400
condition: and