Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update JKStatus.java to bypass restrictions #40

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update JKStatus.java to bypass restrictions #40

wants to merge 1 commit into from

Commits on Mar 29, 2023

  1. Update JKStatus.java 

    For vulnerable targets, I have personally observed J2EEScan in Burpsuite does not detect JK endpoints with forbidden or restricted access. Appending a semi-colon at those endpoints will result in a bypass and should likely be detected by the scanner.
Reference: https://www.immunit.ch/en/blog/2018/11/02/cve-2018-11759-apache-mod_jk-access-control-bypass/
    @spwn3r49sd3r00
    spwn3r49sd3r00 authored Mar 29, 2023
    Configuration menu
    Copy the full SHA
    a339b83 View commit details
    Browse the repository at this point in the history