id: springboot-health

info:
  name: Spring Boot Health Actuator Panel - Detect
  author: pussycat0x,TheZakMan
  severity: info
  description: Spring Boot Health Actuator panel was detected.
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0
    cwe-id: CWE-200
  metadata:
    max-request: 2
    verified: true
  tags: springboot,exposure,misconfig,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/health"
      - "{{BaseURL}}/actuator/health"

    stop-at-first-match: true

    matchers-condition: and
    matchers:
      - type: dsl
        dsl:
          - "status_code == 200"
          - 'contains_all(body, "\"status\"", "\"UP\"")'
          - "contains_any(tolower(content_type), 'application/json', 'application/vnd.spring-boot')"
        condition: and

      - type: word
        part: body
        words:
          - '"components"'
          - '"diskSpace"'
          - '"mongo"'
          - '"jms"'
          - '"ping"'
          - '"db"'
          - '"redis"'
          - '"livenessState"'
          - '"readinessState"'
        condition: or
# digest: 4b0a00483046022100ee0e3fccedc1a65dc2518adb04925b11bd7ed661ef93bf06a1243bf0a9fc7d85022100f950f95828559346d9d217bc370d88460aa1fb5fb06126bc604a18e81dd6fd04:922c64590222798bb761d5b6d8e72950