Merge pull request #310 from waawaa/patch-1
Missing paths with known RCE vulnerabilities - https://www.exploit-db.com/exploits/46814 - https://www.exploit-db.com/exploits/43458 - https://paper.seebug.org/910/ - https://techblog.mediaservice.net/2018/07/cve-2017-10271-oracle-weblogic-server-remote-command-execution-sleep-detection-payload/
This commit is contained in:
@@ -38,6 +38,15 @@
|
||||
/HTTPClntRecv/*
|
||||
/HTTPClntSend
|
||||
/HTTPClntSend/*
|
||||
/wls-wsat/CoordinatorPortType
|
||||
/wls-wsat/CoordinatorPortType11
|
||||
/wls-wsat/ParticipantPortType
|
||||
/wls-wsat/ParticipantPortType11
|
||||
/wls-wsat/RegistrationPortTypeRPC
|
||||
/wls-wsat/RegistrationPortTypeRPC11
|
||||
/wls-wsat/RegistrationRequesterPortType
|
||||
/wls-wsat/RegistrationRequesterPortType11
|
||||
/_async/AsyncResponseService
|
||||
/JspServlet
|
||||
/LogfileSearch
|
||||
/LogfileTail
|
||||
|
||||
Reference in New Issue
Block a user