SpringBoot_Actuator_RCE

swagger-ui-Schnittstelle /swagger-ui.html SpringBoot env – Abrufen sensibler Informationen Teil 1 Wenn wir die springboot-Website direkt aufrufen, sehen wir, dass einige password-Felder mit ausgefüllt sind. 1. Über $name lassen sich Klartextfelder abrufen. 2. Fehlkonfiguration führt zur Offenlegu...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework...

Adobe: Disclosure of git metadata and springboot actuator information

The vulnerability involved the disclosure of git metadata and Springboot actuator information, which was responsibly disclosed and addressed through collaboration with the hacker...

U.S. Dept Of Defense: springboot actuator is leaking internals at ██████████

Proof of Concept If you go to https://█████████/actuator you'll get a complete overview of all the endpoints that are accessable Suggestion: Use a Firefox Browser if possible, its json representation is well formed and the links are clickable ██████████ Impact Information Disclosure...