skills.rest
sseshachala
sseshachalaCOMMUNITY
Explore all skills by this author →
GitHub

hunt-springboot

Scan Spring Boot deployments for exposed Actuator endpoints and SpEL injection risks.

Updated Jun 5, 2026
Search Tags:#vulnerability#spring-boot#actuator#rce#spel#h2-console#jolokia
One-click install
npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill hunt-springboot
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-springboot
Source: https://github.com/sseshachala/Claude-BugHunter-archive/tree/main/skills/hunt-springboot
Command: npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill hunt-springboot

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Hunt Spring Boot vulnerabilities across Actuator endpoints, SpEL injection paths, and misconfigurations to reveal critical security gaps in Java applications.

Core Features & Use Cases

  • Discovery of exposed Actuator endpoints (env, heapdump, mappings, shutdown) and H2 console exposure to assess leakage of secrets and remote access.
  • Detection of SpEL injection opportunities and potential remote code execution vectors via Spring Cloud Function or template fields.
  • Guidance for prioritizing remediation and safe exploitation workflows within authorized engagements across enterprise Spring deployments.

Quick Start

Run a Spring Boot assessment by probing actuator endpoints, env data exposure, and SpEL/RCE test payloads against a target deployment.

Frequently Asked Questions about hunt-springboot

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan for exposed Spring Boot Actuator endpoints?▼

To scan for exposed Spring Boot Actuator endpoints, probe target deployments for paths like /actuator, env, heapdump, mappings, and shutdown to identify potential data exposure and remote access risks.

What is SpEL injection in Spring Boot and how can it lead to RCE?▼

SpEL injection in Spring Boot occurs when user input is evaluated as Spring Expression Language, potentially enabling remote code execution via vectors like Spring Cloud Function or template fields.

How do I test for H2 console exposure in enterprise Java applications?▼

Test for H2 console exposure in enterprise Java applications by probing Spring Boot deployments for misconfigured H2 console access, which can reveal critical security gaps and unauthorized remote entry points.

Can this Skill detect Jolokia vulnerabilities in Spring Boot deployments?▼

Yes, this Skill detects Jolokia vulnerabilities in Spring Boot deployments by scanning exposed Jolokia endpoints alongside Actuator and H2 console vectors to assess remote code execution risks.

What is the best way to remediate Spring Boot Actuator misconfigurations?▼

The best way to remediate Spring Boot Actuator misconfigurations is to follow actionable guidance that prioritizes disabling unprotected endpoints and restricting access to sensitive env data and shutdown features.

Do I need authorization before testing Spring Boot vulnerabilities?▼

Yes, you need explicit authorization before testing Spring Boot vulnerabilities, as scanning Actuator endpoints and SpEL RCE payloads must be conducted safely within authorized enterprise engagements.

Related Skills

Explore More Software Engineering Skills→
gongzeqgongzeq

katana-crawl-web

Crawls authorized web targets to generate deduplicated candidate URLs for vulnerability scanning.

Community
Intermediate
uphiagouphiago
1.1k

hunt-springboot

Detect Spring Boot-specific vulnerabilities including Actuator endpoints, SpEL injection, and Spring4Shell.

Community
Intermediate
EntroVyxEntroVyx
3

recon-fire-restoration

Automate security reconnaissance of WordPress restoration sites to detect PII leaks and misconfigurations.

Community
Intermediate
clostaunauclostaunau
1

spring-framework-patterns

Review Spring Boot 3.x+ projects for dependency injection and layering issues.

Community
Advanced