Skip to content

Commit f9eb361

Browse files
authored
Update run.py
1 parent a72c7fa commit f9eb361

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

inc/run.py

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -124,6 +124,7 @@ def download(url: str, fname: str, proxies: str):
124124
url3 = urllist + "heapdump.json"
125125
url4 = urllist + "gateway/actuator/heapdump"
126126
url5 = urllist + "hystrix.stream"
127+
url6 = urllist + "artemis-portal/artemis/heapdump"
127128

128129
if str(requests.head(url1)) != "<Response [200]>":
129130
cprint("[-] 在 /actuator/heapdump 未发现heapdump敏感文件泄露" ,"yellow")
@@ -160,5 +161,11 @@ def download(url: str, fname: str, proxies: str):
160161
cprint("[+][+][+] 发现 /hystrix.stream 监控数据文件泄露" + ' ' + "下载端点URL为:" + url ,"red")
161162
download(url, "hystrix.stream" ,proxies)
162163
sys.exit()
164+
if str(requests.head(url6)) != "<Response [200]>":
165+
cprint("[-] 在 /artemis-portal/artemis/heapdump 未发现heapdump监控数据文件泄露,请手动验证","yellow")
166+
else:
167+
url = url6
168+
cprint("[+][+][+] 发现 /artemis-portal/artemis/heapdump 监控数据文件泄露" + ' ' + "下载端点URL为:" + url ,"red")
169+
download(url, "heapdump" ,proxies)
170+
sys.exit()
163171
sys.exit()
164-

0 commit comments

Comments
 (0)