2021-01-02 04:59:06 +00:00
|
|
|
id: CVE-2019-11248
|
2020-08-19 14:33:23 +00:00
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: exposed_pprof
|
|
|
|
|
author: 0xceeb
|
2020-08-19 14:42:29 +00:00
|
|
|
severity: medium
|
2021-02-05 19:44:41 +00:00
|
|
|
tags: cve,cve2019,debug
|
2020-08-19 14:44:59 +00:00
|
|
|
|
2020-08-19 14:42:29 +00:00
|
|
|
# https://medium.com/bugbountywriteup/my-first-bug-bounty-21d3203ffdb0
|
|
|
|
|
# http://mmcloughlin.com/posts/your-pprof-is-showing
|
2020-08-19 14:44:59 +00:00
|
|
|
|
2020-08-19 14:33:23 +00:00
|
|
|
requests:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
2020-08-19 14:44:59 +00:00
|
|
|
- "{{BaseURL}}/debug/pprof/"
|
2020-08-19 14:33:23 +00:00
|
|
|
matchers:
|
|
|
|
|
- type: word
|
|
|
|
|
words:
|
|
|
|
|
- "Types of profiles available:"
|
2020-08-19 14:44:59 +00:00
|
|
|
- "Profile Descriptions"
|
