id: jolokia-acceslogvalve-rce

info:
  name: Jolokia write to RCE valve
  author: pathtaga
  severity: critical
  description: RCE in Jolokia < 1.7.1 using AccesLogValve
  tags: jolokia,rce
  reference:
    - https://github.com/laluka/jolokia-exploitation-toolkit
    - https://therealcoiffeur.github.io/c11011

http:
  - method: GET
    path:
      - "{{BaseURL}}/jolokia/list"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        part: body
        words:
          - "\"host=localhost,name=AccessLogValve,type=Valve\""
# digest: 490a00463044022013493c4e73d11b0e0c2b524e351deefa650d70bf598672e1267d9e6c9b1c0bc802203372a223b1af40733b5871cad530b43c3e312216d2349760348b705df8ebc50d:922c64590222798bb761d5b6d8e72950