J2EEScan
J2EEScan copied to clipboard
J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
Do you have a plan to create a J2EEScan version for ZAP proxy??
In this project; why use "`List issues = new ArrayList()`"; when I take it in Elipse ,this will come a error; why not use "`List issues = new ArrayList()`" or...
Bumps [jsoup](https://github.com/jhy/jsoup) from 1.8.1 to 1.15.3. Release notes Sourced from jsoup's releases. jsoup 1.15.3 jsoup 1.15.3 is out now, and includes a security fix for potential XSS attacks, along with...
**Defect Jetty 11.x and 10.x End of Life checks** The Jetty EoL check does not work correctly. It only checks for the major version and thus generates a scan issue...
Hi, currently jolokia installations are not correctly detected, as none of the included strings match the tested `/jolokia/list` endpoint. This pull request adds a generic string, which is typically contained...
Bumps [sqlite-jdbc](https://github.com/xerial/sqlite-jdbc) from 3.16.1 to 3.41.2.2. Release notes Sourced from sqlite-jdbc's releases. Release 3.41.2.2 Changelog 🚀 Features jdbc add support for LocalDate, LocalTime, LocalDateTime in ResultSet#getObject (1d2ff63) implement PreparedStatement getParameterType...
For vulnerable targets, I have observed J2EEScan in Burpsuite does not detect JK endpoints with forbidden or restricted access. Appending a semi-colon at those endpoints will result in a bypass...
In new version sqlite-jdbc adds a native library for mac on m1 Issue for reference: https://github.com/xerial/sqlite-jdbc/issues/562