初遇难题
发现一个bQc站先尝试打一下主站










柳暗花明
突破点:他有一个8888端口,访问都会跳转非法ip


路径 | 是否默认启用 | 功能描述 |
/auditevents | 是 | 显示当前应用程序的审计事件信息 |
/beans | 是 | 显示一个应用中所有Spring Beans的完整列表 |
/conditions | 是 | 显示配置类和自动配置类的状态及它们被应用或未被应用的原因 |
/configprops | 是 | 显示一个所有@ConfigurationProperties的集合列表 |
/env | 是 | 显示来自Spring的 ConfigurableEnvironment的属性 |
/flyway | 是 | 显示数据库迁移路径(如果存在) |
/health | 是 | 显示应用的健康信息(当使用一个未认证连接访问时显示一个简单的’status’,使用认证连接访问则显示全部信息详情) |
/info | 是 | 显示任意的应用信息 |
/liquibase | 是 | 展示任何Liquibase数据库迁移路径(如果存在) |
/metrics | 是 | 展示当前应用的metrics信息 |
/mappings | 是 | 显示一个所有@RequestMapping路径的集合列表 |
/scheduledtasks | 是 | 显示应用程序中的计划任务 |
/sessions | 否 | 允许从Spring会话支持的会话存储中检索和删除用户会话 |
/shutdown | 否 | 允许应用以优雅的方式关闭(默认情况下不启用) |
/threaddump | 是 | 执行一个线程dump |
/heapdump | 是 | 返回一个GZip压缩的hprof堆dump文件 |
/jolokia | 是 | 通过HTTP暴露JMX beans(当Jolokia在类路径上时,WebFlux不可用) |
/logfile | 是 | 返回日志文件内容(如果设置了logging.file或logging.path属性的话),支持使用HTTP Range头接收日志文件内容的部分信息 |
/prometheus | 是 | 以可以被Prometheus服务器抓取的格式显示metrics信息 |
开始扫描
actuator/auditLog
actuator/auditevents
actuator/autoconfig
actuator/beans
actuator/caches
actuator/conditions
actuator/configurationMetadata
actuator/configprops
actuator/dump
actuator/env
actuator/events
actuator/exportRegisteredServices
actuator/features
actuator/flyway
actuator/health
actuator/heapdump
actuator/healthcheck
actuator/heapdump
actuator/httptrace
actuator/hystrix.stream
actuator/info
actuator/integrationgraph
actuator/jolokia
actuator/logfile
actuator/loggers
actuator/loggingConfig
actuator/liquibase
actuator/metrics
actuator/mappings
actuator/scheduledtasks
actuator/swagger-ui.html
actuator/prometheus
actuator/refresh
actuator/registeredServices
actuator/releaseAttributes
actuator/resolveAttributes
actuator/scheduledtasks
actuator/sessions
actuator/springWebflow
actuator/shutdown
actuator/sso
actuator/ssoSessions
actuator/statistics
actuator/status
actuator/threaddump
actuator/trace
auditevents
autoconfig
api.html
api/index.html
api/swagger-ui.html
api/v2/api-docs
api-docs
beans
caches
cloudfoundryapplication
conditions
configprops
distv2/index.html
docs
druid/index.html
druid/login.html
druid/websession.html
dubbo-provider/distv2/index.html
dump
entity/all
env
env/(name)
eureka
flyway
gateway/actuator
gateway/actuator/auditevents
gateway/actuator/beans
gateway/actuator/conditions
gateway/actuator/configprops
gateway/actuator/env
gateway/actuator/health
gateway/actuator/heapdump
gateway/actuator/httptrace
gateway/actuator/hystrix.stream
gateway/actuator/info
gateway/actuator/jolokia
gateway/actuator/logfile
gateway/actuator/loggers
gateway/actuator/mappings
gateway/actuator/metrics
gateway/actuator/scheduledtasks
gateway/actuator/swagger-ui.html
gateway/actuator/threaddump
gateway/actuator/trace
health
heapdump
heapdump.json
httptrace
hystrix
hystrix.stream
info
integrationgraph
jolokia
jolokia/list
liquibase
list
logfile
loggers
liquibase
metrics
mappings
monitor
prometheus
refresh
scheduledtasks
sessions
shutdown
spring-security-oauth-resource/swagger-ui.html
spring-security-rest/api/swagger-ui.html
static/swagger.json
sw/swagger-ui.html
swagger
swagger/codes
swagger/index.html
swagger/static/index.html
swagger/swagger-ui.html
swagger-dubbo/api-docs
swagger-ui
swagger-ui.html
swagger-ui/html
swagger-ui/index.html
system/druid/index.html
threaddump
template/swagger-ui.html
trace
user/swagger-ui.html
version
v1.1/swagger-ui.html
v1.2/swagger-ui.html
v1.3/swagger-ui.html
v1.4/swagger-ui.html
v1.5/swagger-ui.html
v1.6/swagger-ui.html
v1.7/swagger-ui.html
/v1.8/swagger-ui.html
/v1.9/swagger-ui.html
/v2.0/swagger-ui.html
v2.1/swagger-ui.html
v2.2/swagger-ui.html
v2.3/swagger-ui.html
v2/swagger.json
webpage/system/druid/index.html
%20/swagger-ui.html

https://github.com/whwlsfb/JDumpSpider




转自原文链接地址: https://mp.weixin.qq.com/s/-ZdaVuqVmsw9PCHYDYuABA