Description
SpringBoot Actuator shutdown 端点未授权访问，通过shutdown 端口可以将应用关闭。
SpringBoot Actuator shutdown 端点未授权访问
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zhuanlan.zhihu.com/p/602691208
https://blog.csdn.net/weixin_44106034/article/details/133934404
https://apifox.com/apiskills/how-to-use-spring-boot-actuator-2/
https://github.com/rabbitmask/SB-Actuator
https://www.wangsu.com/news/content/blog/3741
https://comate.baidu.com/zh/page/ilk8i1rh6ca
https://www.nowcoder.com/discuss/396603397997162496
https://www.cnblogs.com/vipsoft/p/17859847.html
https://rivers.chaitin.cn/blog/cq940510lnechd242kvg
https://www.yisu.com/zixun/729033.html
https://www.invicti.com/web-vulnerability-scanner/vulnerabilities/spring-boot-misconfiguration-spring-boot-actuator-shutdown-endpoint-is-web-exposed
https://www.herodevs.com/blog-posts/cve-2026-40976-spring-boot-4-0-actuator-authorization-bypass
https://www.acunetix.com/vulnerabilities/web/spring-boot-misconfiguration-spring-boot-actuator-shutdown-endpoint-is-web-exposed/
https://r0yanx.com/2020/06/05/Spring-Boot-Actuators%E6%9C%AA%E6%8E%88%E6%9D%83GetShell/