2023-08-25 11:35:04 +00:00
id : php-debugbar-exposure
info :
name : Php Debug Bar - Exposure
2024-04-05 05:03:06 +00:00
author : ritikchaddha,pdteam,dhiyaneshDk
severity : high
2023-08-25 11:35:04 +00:00
description : |
The DebugBar integrates easily in any projects and can display profiling data from any part of your application. It comes built-in with data collectors for standard PHP features and popular projects.
reference :
- https://hackerone.com/reports/1883806
- http://phpdebugbar.com/
- https://github.com/maximebf/php-debugbar
metadata :
verified : true
2023-10-14 11:27:55 +00:00
max-request : 2
2023-08-25 11:35:04 +00:00
shodan-query : html:"phpdebugbar"
2023-10-14 11:27:55 +00:00
tags : hackerone,misconfig,php,phpdebug,exposure
2023-08-25 11:35:04 +00:00
http :
- method : GET
path :
- "{{BaseURL}}"
- "{{BaseURL}}/_debugbar/open"
2023-08-25 11:46:43 +00:00
host-redirects : true
max-redirects : 2
2023-08-25 11:35:04 +00:00
matchers :
- type : dsl
dsl :
- 'contains(body_1, "phpdebugbar") && contains(body, "widget")'
2023-08-25 12:47:26 +00:00
- 'contains_all(body_2, "\"utime\"","\"datetime\"","{\"id") && contains(content_type_2, "application/json")'
2023-08-25 11:35:04 +00:00
condition : or
2024-04-05 05:14:31 +00:00
# digest: 4a0a00473045022100ae074f15355d3a5c73ee1e144067e2bc82cc11539e6793bcfbf8471f8853945c02201a4ad22c14f9c2d87bf7dcedc9cd70d261f383010b55d4c3098677e7c6090f06:922c64590222798bb761d5b6d8e72950
