Spring Boot (Java)

Resources

SBSCAN: A Penetration Testing Tool Focused on the Spring FrameworkMedium

SPRING BOOT PENTESTING PART 1- FUNDAMENTALSCertcube labs Cyber Security Research Blogs

How I Found and Bypassed a Spring Boot Actuator Information Disclosure BugMedium

Fuzzing ~98,000 Random Spring Boot Servers For AWS S3 KeysMedium

Spring Actuators | Hacktricksblog.1nf1n1ty.team

Enumeration

1. Directory traversal

SecLists/Discovery/Web-Content/Programming-Language-Specific/Java-Spring-Boot.txt at master · danielmiessler/SecListsGitHub

$ gobuster dir -u <target> -w spring-boot.txt

1. Additional endpoints

h2-console
...

Vulnerabilities

Certain versions of nginx + spring boot are vulnerable to an ACL list bypass attack:

Proxy / WAF Protections Bypass | Hacktricksblog.1nf1n1ty.team