Files
nuclei-templates/http/misconfiguration/springboot/springboot-status.yaml
2024-12-01 13:57:55 +00:00

38 lines
972 B
YAML

id: springboot-status
info:
name: Spring Boot Status Actuator Panel - Detect
author: DhiyaneshDk
severity: info
description: Spring Boot Status Actuator panel was detected.
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0
cwe-id: CWE-200
metadata:
verified: true
max-request: 2
shodan-query: title:"Eureka"
tags: misconfig,springboot,exposure
http:
- method: GET
path:
- "{{BaseURL}}/status"
- "{{BaseURL}}/actuator/status"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"freeMemory":'
- '"maxMemory":'
condition: and
- type: status
status:
- 200
# digest: 490a00463044022011729c929fad2cf6034f7524d5c3ac9fe3d9c34a20645c7741eb350f727618310220689563fb0cf08d37b0d2c3db7b9af1377836edafb1c123a6e3202785909743d8:922c64590222798bb761d5b6d8e72950