nuclei-templates/misconfiguration/springboot/springboot-loggers.yaml

34 lines
694 B
YAML

id: springboot-loggers
info:
name: Detect Springboot Loggers
author: that_juan_,dwisiswant0,wdahlenb
severity: low
tags: springboot,exposure
requests:
- method: GET
path:
- "{{BaseURL}}/loggers"
- "{{BaseURL}}/actuator/loggers"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"loggers"'
- '"levels"'
condition: and
- type: status
status:
- 200
- type: word
words:
- "application/json"
- "application/vnd.spring-boot.actuator"
- "application/vnd.spring-boot.actuator.v1+json"
condition: or
part: header