Arachni / arachni

Web Application Security Scanner Framework
http://www.arachni-scanner.com
Other
3.76k stars 761 forks source link

Add common endpoints that may be enabled by default for Spring Boot applications #1026

Open JesseEstum opened 5 years ago

JesseEstum commented 5 years ago

Spring Boot Actuator exposes several endpoints that may be enabled and accessible. Most of these endpoints expose sensitive information about a running application and thus should be disabled or secured.

Details on the endpoints can be found here: https://docs.spring.io/spring-boot/docs/current/reference/html/production-ready-endpoints.html