I have a web application URL and I am interested to know which JBOSS version it is running behind. How can I check that? Is it possible to check with curl?

migrated from security.stackexchange.com Jan 21 '18 at 15:18

This question came from our site for information security professionals.


Generally, no.

If the JBoss instance is configured poorly, a provoked error message might leak the version number. This can - of course - be done using curl, as well as with any other means to send invalid requests to the application in question.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy