Added Spring4Shell.bcheck rule

PortSwigger / BChecks

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

https://portswigger.net/burp/documentation/scanner/bchecks

GNU Lesser General Public License v3.0

619 stars 109 forks source link

Added Spring4Shell.bcheck rule #84

Closed GiriRaj249 closed 1 year ago

GiriRaj249 commented 1 year ago

About

Added a rule to check for Spring4Shell vulnerability by targeting GET requests. Following are the conditions that I have used to validate the existence of the bug :

status code is "400"
response body should contain java.lang.IllegalArgumentException error

GiriRaj249 commented 1 year ago

Hey Team,

I got 1 approval from @olliewuk, but this merge required at least 2 approvals. When can I expect my commit to be pushed on the BCheck repo ?

Awaiting your approval/response. Thanks in advance

GiriRaj249 commented 1 year ago

Hey Team Portswigger,

Any update that i need to be aware off?