domains / families / security / hunt-springboot

hunt-springboot

authentic

Hunt Spring Boot specific vulnerabilities — Actuator endpoints (heapdump, env, loggers, mappings, shutdown), Spring Expression Language (SpEL) injection → RCE, H2 console RCE, Jolokia JMX exposure, Spring4Shell (CVE-2022-22965), Spring Cloud Function SPEL (CVE-2022-22963), heap dump credential extraction. Use when target runs Spring Boot — detected via X-Application-Context header, /actuator, Whitelabel Error Page, or Java stack traces.

When to use

• Actuator endpoint enumeration
• Heap dump credential extraction
• SpEL injection testing
• H2 Console RCE
• Spring4Shell CVE-2022-22965
• Spring Cloud Function SPEL CVE-2022-22963
• Jolokia JMX exposure
• Spring Boot fingerprinting

Skill page

Source