Skip to content
Nuclei Templates

DWR detect test page detection

ID: dwr-index-detect

Severity: low

Author: pussycat0x

Tags: tech,misconfig,dwr

Description

Section titled “Description”

The index contains the list of exposed Java classes. From here one can navigate to the test page of each class where every callable method is described and can be easily tested. This is a great way to find out what methods are exposed and learn how they function.

YAML Source

Section titled “YAML Source”
id: dwr-index-detect


info:
  name: DWR detect test page detection
  author: pussycat0x
  severity: low
  description: The index contains the list of exposed Java classes. From here one can navigate to the test page of each class where every callable method is described and can be easily tested. This is a great way to find out what methods are exposed and learn how they function.
  reference:
    - http://aetherlab.net/2012/09/experiences-in-pentesting-dwr/
  metadata:
    max-request: 1
    google-query: intitle:"DWR Test Index"
  tags: tech,misconfig,dwr


http:
  - method: GET
    path:
      - '{{BaseURL}}/dwr/index.html'


    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "<title>DWR Test Index</title>"


      - type: status
        status:
          - 200
# digest: 4a0a0047304502206d755577130053ab06a72b05abd6504e4e1655dd9e1e6d7c513f38a62611ce6c02210088d98e363e8c3cda69b5aacc41c4ff30fcf529778449148e8c754d459000dc3c:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/dwr-index-detect.yaml"

View on Github