fatt 0.1.1

Find All The Things - A high-performance, distributed security scanning tool
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129

rules:
  # Spring Boot Actuator Endpoints
  - name: "spring_actuator"
    path: "/actuator"
    signature: "Spring Boot"
    description: "Spring Boot Actuator base endpoint"
    severity: "high"
    
  - name: "spring_env"
    path: "/actuator/env"
    signature: "Spring Boot"
    description: "Spring environment variables (may contain secrets)"
    severity: "critical"
    
  - name: "spring_beans"
    path: "/actuator/beans"
    signature: "Spring Boot"
    description: "Spring beans configuration"
    severity: "high"
    
  - name: "spring_heapdump"
    path: "/actuator/heapdump"
    signature: "Spring Boot"
    description: "JVM heap dump (may contain secrets)"
    severity: "critical"
    
  - name: "spring_jolokia"
    path: "/actuator/jolokia"
    signature: "Spring Boot"
    description: "Jolokia JMX access"
    severity: "critical"
    
  - name: "spring_logfile"
    path: "/actuator/logfile"
    signature: "Spring Boot"
    description: "Application log file"
    severity: "high"
    
  - name: "spring_mappings"
    path: "/actuator/mappings"
    signature: "Spring Boot"
    description: "Request mapping details"
    severity: "high"
    
  - name: "spring_shutdown"
    path: "/actuator/shutdown"
    signature: "Spring Boot"
    description: "Shutdown endpoint"
    severity: "critical"

  # Common Java Application Endpoints
  - name: "java_jndi"
    path: "/jndi"
    signature: "Java JNDI"
    description: "Java JNDI lookup endpoint"
    severity: "critical"
    
  - name: "java_jmx"
    path: "/jmx"
    signature: "JMX"
    description: "Java Management Extensions"
    severity: "high"
    
  - name: "tomcat_manager"
    path: "/manager/html"
    signature: "Tomcat"
    description: "Tomcat Manager application"
    severity: "critical"
    
  - name: "jenkins_dashboard"
    path: "/jenkins"
    signature: "Jenkins"
    description: "Jenkins CI/CD dashboard"
    severity: "high"
    
  - name: "solr_admin"
    path: "/solr/admin"
    signature: "Solr"
    description: "Apache Solr admin interface"
    severity: "high"
    
  - name: "elastic_search"
    path: "/_search"
    signature: "Elasticsearch"
    description: "Elasticsearch search endpoint"
    severity: "high"
    
  - name: "elastic_cat"
    path: "/_cat"
    signature: "Elasticsearch"
    description: "Elasticsearch cat API"
    severity: "high"

  # Java Web Application Default Files
  - name: "web_inf"
    path: "/WEB-INF"
    signature: "Java Web"
    description: "Exposed WEB-INF directory"
    severity: "critical"
    
  - name: "web_inf_web_xml"
    path: "/WEB-INF/web.xml"
    signature: "Java Web"
    description: "Exposed web.xml configuration"
    severity: "critical"
    
  - name: "meta_inf"
    path: "/META-INF"
    signature: "Java Web"
    description: "Exposed META-INF directory"
    severity: "critical"
    
  - name: "classes_directory"
    path: "/WEB-INF/classes"
    signature: "Java Web"
    description: "Exposed Java classes directory"
    severity: "critical"
    
  - name: "lib_directory"
    path: "/WEB-INF/lib"
    signature: "Java Web"
    description: "Exposed Java library directory"
    severity: "high"
    
  - name: "jsessionid_exposure"
    path: ";jsessionid="
    signature: "Java Session"
    description: "JSESSIONID in URL"
    severity: "medium"