New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update JKStatus.java to bypass restrictions #40

Open

spwn3r49sd3r00 wants to merge 1 commit into ilmila:master from spwn3r49sd3r00:patch-1

spwn3r49sd3r00 commented Mar 29, 2023 •

edited

Loading

For vulnerable targets, I have observed J2EEScan in Burpsuite does not detect JK endpoints with forbidden or restricted access. Appending a semi-colon at those endpoints will result in a bypass and should likely be detected by the scanner. Reference: https://www.immunit.ch/en/blog/2018/11/02/cve-2018-11759-apache-mod_jk-access-control-bypass/


          Update JKStatus.java

a339b83

For vulnerable targets, I have personally observed J2EEScan in Burpsuite does not detect JK endpoints with forbidden or restricted access. Appending a semi-colon at those endpoints will result in a bypass and should likely be detected by the scanner.
Reference: https://www.immunit.ch/en/blog/2018/11/02/cve-2018-11759-apache-mod_jk-access-control-bypass/

spwn3r49sd3r00 changed the title ~~Update JKStatus.java~~ Update JKStatus.java to bypass restrictions

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet