Skip to content

Access Control: Exposed JDWP Debug Port

Identifier: jdwp_debug_port_exposed

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

JDWP debug ports exposed to untrusted networks can allow remote debugging and code execution against Java applications.

How we test: We identify Java Debug Wire Protocol services reachable on public ports and report them when the debug service is exposed.

Configuration

Example

Example configuration:

---
security_tests:
  jdwp_debug_port_exposed:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.