mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework...

SpringBoot_Actuator_RCE

Interfaccia swagger-ui /swagger-ui.html SpringBoot env: recupero di informazioni sensibili Parte 1 Quando accediamo direttamente al sito springboot, possiamo vedere che alcuni campi password sono valorizzati con 1. Tramite $name è possibile ottenere il campo in chiaro 2. Una configurazione non...

Adobe: Disclosure of git metadata and springboot actuator information

The vulnerability involved the disclosure of git metadata and Springboot actuator information, which was responsibly disclosed and addressed through collaboration with the hacker...

U.S. Dept Of Defense: springboot actuator is leaking internals at ██████████

Proof of Concept If you go to https://█████████/actuator you'll get a complete overview of all the endpoints that are accessable Suggestion: Use a Firefox Browser if possible, its json representation is well formed and the links are clickable ██████████ Impact Information Disclosure...