W-DEBUG-ENDPOINTDiscovery

Debug / Admin Endpoint Exposed

/actuator (Spring Boot), /trace, /heapdump, /debug, framework-default panels reachable in prod.

§ Where this technique fits

W-DEBUG-ENDPOINT is catalogued under the Discovery tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 5 on average.

§ Dossiers chaining this technique

AXFR → discover shadow-IT staging → exploitable web app
DNS server allows unrestricted AXFR. Pull the full zone, find admin- / staging- / dev- hostnames never linked, hit one with default creds / leftover debug routes.
step 5 / 6

§ What commonly comes next

01
Exfiltration Over C2 Channel
T1041 · Exfiltration
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

AXFR → discover shadow-IT staging → exploitable web app

§ What commonly comes next