1+ Bypass_List : ['%2f', '%2e']
2+ Load_List :
3+ - {loaded: true, re: springframework|reloadByURL|createJNDIRealm, method: GET, name: Spring
4+ Jolokia|Rce, id : 8, state: '200', type: Spring, url: /actuator/jolokia/list, info: 'Spring
5+ Jolokia|XXE/RCE:reloadByURL|RCE:createJNDIRealm Find!!!'}
6+ - {loaded: true, re: api, method: GET, name: Doc File, id: 9, state: '200', type: ApiDoc,
7+ url : /doc.html, info: Doc File Find!!!}
8+ - {loaded: true, re: description, method: GET, name: swagger.json, id: 10, state: '200',
9+ type : Spring, url: /v1/swagger.json, info: swagger.json Find!!!}
10+ - {loaded: true, re: description, method: GET, name: swagger.json, id: 11, state: '200',
11+ type : Spring, url: /v2/swagger.json, info: swagger.json Find!!!}
12+ - {loaded: true, re: swaggerVersion, method: GET, name: Swagger-resources, id: 12,
13+ state : ' 200' , type: Spring, url: /swagger-resources, info: swagger-resources Find!!!}
14+ - {loaded: true, re: SOAP|WSDL|ASP.NET|tempuri.org, method: GET, name: Soap, id: 13,
15+ state : ' 200' , type: ApiDoc, url: /services, info: Soap Find!!!}
16+ - {loaded: true, re: Web API|api, method: GET, name: Web API Help, id: 14, state: '200',
17+ type : ApiDoc, url: /Help, info: Web API Help Find!!!}
18+ - {loaded: true, re: README.md, method: GET, name: README.md, id: 20, state: '206',
19+ type : Information leakage, url: /README.md, info: README.md Find!!!}
20+ - {loaded: true, re: '(Swagger 2\.0)|(\"swagger\"\:)|(Swagger UI)|(\<title\>Swagger
21+ UI)|(swaggerVersion)|(id\=\"swagger\-ui)|swagger|openapi|apiVersion', method : GET,
22+ name : api-docs, id: 24, state: '200', type: ApiDoc, url: /v3/api-docs, info: api-docs
23+ Find !!!}
24+ - {loaded: true, re: User-agent, method: GET, name: robots, id: 25, state: '200',
25+ type : Information leakage, url: /robots.txt, info: robots.txt Find !!!}
26+ - {loaded: true, re: '(Swagger 2\.0)|(\"swagger\"\:)|(Swagger UI)|(\<title\>Swagger
27+ UI)|(swaggerVersion)|(id\=\"swagger\-ui)|swagger|api-docs|openapi|apiVersion',
28+ method : GET, name: Swagger-UI, id: 29, state: '200', type: ApiDoc, url: /api/swagger-ui.html,
29+ info : Swagger Find!!!}
30+ - {loaded: true, re: Platform|Components, method: GET, name: Docker Unauthorized,
31+ id : 30, state: '200', type: Unauthorized, url: /version, info: Docker Unauthorized
32+ Find!!!}
33+ - {loaded: true, re: repositories, method: GET, name: Docker Registry, id: 31, state: '200',
34+ type : Unauthorized, url: /v2/_catalog, info: Docker Registry Find!!!}
35+ - {loaded: true, re: Jenkins, method: GET, name: Jenkins, id: 38, state: '200', type: Unauthorized,
36+ url : /manage, info: Jenkins Find!!!}
37+ - {loaded: true, re: ActiveMQ, method: GET, name: ActiveMQ, id: 39, state: '200',
38+ type : Unauthorized, url: /admin/, info: ActiveMQ Find!!!}
39+ - {loaded: true, re: Dashboard|Request-Handler, method: GET, name: Solr, id: 42, state: '200',
40+ type : Unauthorized, url: /solr/admin, info: Solr Find!!!}
41+ - {loaded: true, re: SOAP|WSDL|ASP.NET|tempuri.org, method: GET, name: Soap, id: 44,
42+ state : ' 200' , type: ApiDoc, url: /webservice, info: Soap Find!!!}
43+ - {loaded: true, re: '(Swagger 2\.0)|(\"swagger\"\:)|(Swagger UI)|(\<title\>Swagger
44+ UI)|(swaggerVersion)|(id\=\"swagger\-ui)|swagger|openapi|apiVersion', method : GET,
45+ name : api-docs, id: 45, state: '200', type: ApiDoc, url: /api-docs, info: api-docs
46+ Find!!!}
47+ - {loaded: true, re: codemirror\.addone\.fullscreen\.js, method: GET, name: Nacos,
48+ id : 46, state: '200', type: Unauthorized, url: /nacos/index.html, info: Nacos Find!!!}
49+ - {loaded: true, re: (java\.runtime\.version)|(java\.class\.version)|(sping\.config\.location)|(spring\.application\.name)|(applicationConfig)|(activeProfiles)|(server\.port)|(local\.server\.port),
50+ method : GET, name: Spring Env RCE, id: 47, state: '200', type: Spring, url: /env,
51+ info : ' Actuator Env|RCE:spring.cloud.bootstrap.location|XStreamRCE:eureka.client.serviceUrl.defaultZone
52+ Find!!!' }
53+ - {loaded: true, re: (java\.runtime\.version)|(java\.class\.version)|(sping\.config\.location)|(spring\.application\.name)|(applicationConfig)|(activeProfiles)|(server\.port)|(local\.server\.port)|springframework|spring.cloud.bootstrap.location|Spring
54+ Actuator Env RCE, method : GET, name: Spring Env RCE, id: 48, state: '200', type: Spring,
55+ url : /actuator/env, info: 'Actuator Env|RCE:spring.cloud.bootstrap.location|XStreamRCE:eureka.client.serviceUrl.defaultZone
56+ Find!!!'}
57+ - {loaded: true, re: (src=\"\/druid\.js\")|(href\=\"\/druid\.css\"), method: GET,
58+ name : Druid Monitor, id: 49, state: '200', type: Unauthorized, url: /druid/index.html,
59+ info : Druid Monitor Find!!!}
60+ - {loaded: true, re: '(Swagger 2\.0)|(\"swagger\"\:)|(Swagger UI)|(\<title\>Swagger
61+ UI)|(swaggerVersion)|(id\=\"swagger\-ui)|swagger|openapi|apiVersion', method : GET,
62+ name : api-docs, id: 50, state: '200', type: ApiDoc, url: /v2/api-docs, info: api-docs
63+ Find!!!}
64+ - {loaded: true, re: '(Swagger 2\.0)|(\"swagger\"\:)|(Swagger UI)|(\<title\>Swagger
65+ UI)|(swaggerVersion)|(id\=\"swagger\-ui)|swagger|api-docs|openapi|apiVersion',
66+ method : GET, name: Swagger-UI, id: 51, state: '200', type: ApiDoc, url: /swagger-ui.html,
67+ info : Swagger-UI Find!!!}
68+ Icon_Hash_List :
69+ - {name: "Confluence", murmur_hash: "-305179312", md5: "", type: "Application", info: "Atlassian Confluence"}
70+ - {name: "GitLab", murmur_hash: "-1231872293", md5: "", type: "Application", info: "GitLab CE/EE"}
71+ - {name: "Jenkins", murmur_hash: "81586312", md5: "", type: "Application", info: "Jenkins CI"}
72+ - {name: "Grafana", murmur_hash: "1499876150", md5: "", type: "Application", info: "Grafana Dashboard"}
73+ - {name: "Kibana", murmur_hash: "282421062", md5: "", type: "Application", info: "Kibana Dashboard"}
74+ - {name: "Zabbix", murmur_hash: "1196081225", md5: "", type: "Application", info: "Zabbix Monitor"}- {name: "1panel", murmur_hash: "1300107149", md5: "", type: "Application", info: "fit2cloud 1panel"}
75+ - {name: "1panel", murmur_hash: "1453309674", md5: "", type: "Application", info: "fit2cloud 1panel"}
0 commit comments