Http Exposed Management Endpoint
Description
Detects when a management/admin endpoint (H2 console, phpMyAdmin, Tomcat Manager, JBoss JMX console, Werkzeug debugger) is reachable without authentication, which can lead to information disclosure, unauthorized administrative access, or remote code execution depending on the endpoint.
Detection Strategy
• Sends concurrent HTTP GET requests to a predefined list of common management endpoint paths with redirect following disabled
• Reports a vulnerability only when the response is HTTP 200 (no redirect) and its body matches endpoint-specific markers that confirm the real management interface is present, rejecting soft-404 pages
• Each exposed endpoint produces a distinct evidence entry suffixed with its URL so multiple exposed endpoints on the same host don't collapse into one fingerprint
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' pentesting team, fill out this contact form.