Skip to content

Commit 11a47a3

Browse files
feat(docs): Added documentation for the 'Java-Spring-Boot.txt' wordlist
Related to #1220
1 parent 3b6d3af commit 11a47a3

File tree

1 file changed

+4
-0
lines changed
  • Discovery/Web-Content/Programming-Language-Specific

1 file changed

+4
-0
lines changed
Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
## Java-Spring-Boot.txt
2+
Use for: Detecting actuator endpoints, and testing for RCEs in Spring-Boot instances.
3+
4+
Note that it's possible for a spring-boot backend to be behind a spring-cloud-gateway, which may _only_ route all traffic prefixed with `/api/` to the backend. Consider fuzzing the starting prefix `api` with many different values to find what reaches the backend. A recommended wordlist to fuzz this value with is at `Fuzzing/Miscellaneous/schemes.txt`

0 commit comments

Comments
 (0)