nuclei-templates/misconfiguration/springboot/springboot-loggers.yaml

33 lines
672 B
YAML

id: springboot-loggers
info:
name: Detect Springboot Loggers
author: that_juan_ & dwisiswant0 & wdahlenb
severity: low
requests:
- method: GET
path:
- "{{BaseURL}}/loggers"
- "{{BaseURL}}/actuator/loggers"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"loggers"'
- '"profiles":'
condition: or
- type: status
status:
- 200
- type: word
words:
- "application/json"
- "application/vnd.spring-boot.actuator"
- "application/vnd.spring-boot.actuator.v1+json"
condition: or
part: header