EMSeek

## ELcheck.sh
#!/bin/bash
# By Eldar Marcussen for SEEK 29/04/2020
echo 'Simplistic Java Expression Language Injection detection'
echo '==================================================}*>>>'
echo ' [*] Identifying use of spring eval with variables:'
grep -HrnE '<spr(ing)?:eval.*\$\{' "$1"
echo ' [*] Identifying EL code definitions.'
grep -hroE '<spr(ing)?:(message|theme).*code=[^>]+>' "$1" | sort -u | sed -e"s/.*code=[\"\']//" -e"s/[\'\"].*//" > /tmp/elcList.txt
echo ' [+] Code list saved as /tmp/elcList.txt'
echo ' [*] Shortlisting codes with arguments.'
	#!/bin/bash
	# By Eldar Marcussen for SEEK 29/04/2020
	echo 'Simplistic Java Expression Language Injection detection'
	echo '==================================================}*>>>'
	echo ' [*] Identifying use of spring eval with variables:'
	grep -HrnE '<spr(ing)?:eval.*\$\{' "$1"
	echo ' [*] Identifying EL code definitions.'
	grep -hroE '<spr(ing)?:(message\|theme).code=[^>]+>' "$1" \| sort -u \| sed -e"s/.code=[\"\']//" -e"s/[\'\"].*//" > /tmp/elcList.txt
	echo ' [+] Code list saved as /tmp/elcList.txt'
	echo ' [*] Shortlisting codes with arguments.'