J2EEScan icon indicating copy to clipboard operation
J2EEScan copied to clipboard

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

Results 18 J2EEScan issues
Sort by recently updated
recently updated
newest added

Do you have a plan to create a J2EEScan version for ZAP proxy??

In this project; why use "`List issues = new ArrayList()`"; when I take it in Elipse ,this will come a error; why not use "`List issues = new ArrayList()`" or...

Bumps [jsoup](https://github.com/jhy/jsoup) from 1.8.1 to 1.15.3. Release notes Sourced from jsoup's releases. jsoup 1.15.3 jsoup 1.15.3 is out now, and includes a security fix for potential XSS attacks, along with...

dependencies

**Defect Jetty 11.x and 10.x End of Life checks** The Jetty EoL check does not work correctly. It only checks for the major version and thus generates a scan issue...

Hi, currently jolokia installations are not correctly detected, as none of the included strings match the tested `/jolokia/list` endpoint. This pull request adds a generic string, which is typically contained...

Bumps [sqlite-jdbc](https://github.com/xerial/sqlite-jdbc) from 3.16.1 to 3.41.2.2. Release notes Sourced from sqlite-jdbc's releases. Release 3.41.2.2 Changelog 🚀 Features jdbc add support for LocalDate, LocalTime, LocalDateTime in ResultSet#getObject (1d2ff63) implement PreparedStatement getParameterType...

dependencies

For vulnerable targets, I have observed J2EEScan in Burpsuite does not detect JK endpoints with forbidden or restricted access. Appending a semi-colon at those endpoints will result in a bypass...

In new version sqlite-jdbc adds a native library for mac on m1 Issue for reference: https://github.com/xerial/sqlite-jdbc/issues/562