Jira信息​​收集 - r34l!ty - 不负勇往
MENU

Jira信息​​收集

May 11, 2018 • Security

错误配置匿名访问

浏览用户(用户名/用户组/Email) /secure/popups/UserPickerBrowser.jspa

1_BBUeDi-DezNPMT76xiS7yA.png

仪表盘 /secure/ConfigurePortalPages!default.jspa?view=popular

1_a9PZ3oZ8pU0NsK2Sws9fuQ.png

过滤器 /secure/ManageFilters.jspa

1_alVsJFccwBiVTJUMkjcUtg.png

工具

https://github.com/NetSPI/JIG

pip install -r requirements.txt

python JIG.py -a https://jira.com/
Archives QR Code
QR Code for this page
Tipping QR Code