nuclei-templates/exposures/configs/debug-vars.yaml

28 lines
563 B
YAML
Raw Normal View History

id: debug-vars
info:
name: Golang Expvar - Detect
author: luqman
2023-02-16 06:13:17 +00:00
severity: low
description: Golang expvar function exposes multiple public variables via HTTP such as stack trace information and server operation counters.
tags: go,debug,exposure
requests:
- method: GET
path:
- "{{BaseURL}}/debug/vars"
matchers-condition: and
matchers:
- type: word
words:
- '"memstats":'
- '"cmdline":'
condition: and
- type: status
status:
- 200
# Enhanced by cs on 2023/02/13