News for hackers. Stuff that matters.
Re:We Hacked Apple for 3 Months by brown9-2 on Thursday October 08, 2020 @07:53PM (#24725253)
Does Spring Boot enable these by default?
Re:We Hacked Apple for 3 Months by joninous on Friday October 09, 2020 @07:45AM (#24728929)
You need to include a separate actuators module to enable them. IIRC in Spring Boot version 1.5 and older actuators were enabled and exposed as web endpoints by default. The heapdump endpoint mentioned in the article also required inclusion of Spring MVC module – which I guess most web apps do include.

In Spring Boot 2.0 and newer actuator module only exposes "info" and "health" web endpoints by default. Default configuration does expose more endpoints via JMX, though. Also, if your project includes Spring Security module actuator endpoints are secured by default.