2022-08-03 11:01:52 +00:00
|
|
|
id: symfony-debug
|
2021-07-26 11:51:46 +00:00
|
|
|
|
2020-07-02 13:53:41 +00:00
|
|
|
info:
|
|
|
|
|
name: Symfony Debug Mode
|
2021-07-26 11:51:46 +00:00
|
|
|
author: organiccrap,pdteam
|
2020-07-02 13:53:41 +00:00
|
|
|
severity: high
|
2022-04-15 16:39:44 +00:00
|
|
|
description: A Symfony installations 'debug' interface is enabled, allowing the disclosure and possible execution of arbitrary code.
|
2022-04-22 10:38:41 +00:00
|
|
|
reference:
|
|
|
|
|
- https://github.com/synacktiv/eos
|
2022-08-03 11:27:34 +00:00
|
|
|
metadata:
|
|
|
|
|
verified: true
|
2023-12-29 11:06:03 +00:00
|
|
|
max-request: 4
|
2022-08-03 11:27:34 +00:00
|
|
|
shodan-query: http.html:"symfony Profiler"
|
2023-06-02 23:20:49 +00:00
|
|
|
tags: symfony,debug,misconfig
|
2021-03-12 08:57:14 +00:00
|
|
|
|
2023-04-27 04:28:59 +00:00
|
|
|
http:
|
2020-07-02 13:53:41 +00:00
|
|
|
- method: GET
|
|
|
|
|
path:
|
2021-01-14 14:41:56 +00:00
|
|
|
- '{{BaseURL}}'
|
2023-12-29 11:06:03 +00:00
|
|
|
- "{{BaseURL}}/admin_dev.php"
|
|
|
|
|
- "{{BaseURL}}/index_dev.php"
|
|
|
|
|
- "{{BaseURL}}/app_dev.php"
|
2021-07-26 11:51:46 +00:00
|
|
|
|
2023-12-29 11:06:03 +00:00
|
|
|
stop-on-first-match: true
|
2021-07-26 11:51:46 +00:00
|
|
|
matchers-condition: or
|
2020-07-02 13:53:41 +00:00
|
|
|
matchers:
|
|
|
|
|
- type: word
|
2022-08-03 11:01:52 +00:00
|
|
|
part: header
|
2020-07-02 13:53:41 +00:00
|
|
|
words:
|
2022-08-03 11:01:52 +00:00
|
|
|
- 'x-debug-token-link:'
|
2021-07-26 11:51:46 +00:00
|
|
|
- '/_profiler/'
|
2020-07-02 13:53:41 +00:00
|
|
|
condition: and
|
2022-08-03 11:01:52 +00:00
|
|
|
case-insensitive: true
|
2021-07-26 11:51:46 +00:00
|
|
|
|
|
|
|
|
- type: word
|
2022-08-03 11:01:52 +00:00
|
|
|
part: body
|
2021-07-26 11:51:46 +00:00
|
|
|
words:
|
|
|
|
|
- 'debug mode</a> is enabled.'
|
2023-12-29 11:06:03 +00:00
|
|
|
- 'id="sfWebDebugSymfony"'
|
