Detect Springboot httptrace

What is the "Detect Springboot httptrace?" module?

The "Detect Springboot httptrace" module is designed to detect the presence of the Spring Boot httptrace endpoint and determine if it is exposed. Spring Boot is a popular Java framework used for building web applications. This module focuses on identifying potential misconfigurations or vulnerabilities related to the httptrace endpoint in Spring Boot applications.

This module has a severity level of low, indicating that the detected issue may have limited impact or pose a lower risk to the application.

Impact

If the Spring Boot httptrace endpoint is exposed, it may allow unauthorized access to sensitive information related to HTTP requests and responses. This can potentially lead to security breaches or unauthorized access to user data.

How the module works?

The "Detect Springboot httptrace" module works by sending HTTP requests to specific paths, such as "/httptrace" and "/actuator/httptrace", and analyzing the responses for specific patterns and conditions.

It uses the following matching conditions to identify potential exposures:

- Body: The module looks for specific words in the response body, such as "traces", "timestamp", "principal", and "session". If any of these words are found, it indicates the presence of the httptrace endpoint. - Header: The module checks for specific header values, including "application/json", "application/vnd.spring-boot.actuator", and "application/vnd.spring-boot.actuator.v1+json". If any of these header values are present, it suggests the existence of the httptrace endpoint. - Status: The module verifies that the HTTP response status is 200, indicating a successful request. If the status is different, it may indicate a potential issue with the httptrace endpoint.

By analyzing the responses and matching conditions, the module can determine if the Spring Boot httptrace endpoint is exposed and report any vulnerabilities or misconfigurations.