2023-08-25 11:35:04 +00:00
id : php-debugbar-exposure
info :
name : Php Debug Bar - Exposure
author : ritikchaddha,pdteam
severity : medium
description : |
The DebugBar integrates easily in any projects and can display profiling data from any part of your application. It comes built-in with data collectors for standard PHP features and popular projects.
reference :
- https://hackerone.com/reports/1883806
- http://phpdebugbar.com/
- https://github.com/maximebf/php-debugbar
metadata :
verified : true
2023-10-14 11:27:55 +00:00
max-request : 2
2023-08-25 11:35:04 +00:00
shodan-query : html:"phpdebugbar"
2023-10-14 11:27:55 +00:00
tags : hackerone,misconfig,php,phpdebug,exposure
2023-08-25 11:35:04 +00:00
http :
- method : GET
path :
- "{{BaseURL}}"
- "{{BaseURL}}/_debugbar/open"
2023-08-25 11:46:43 +00:00
host-redirects : true
max-redirects : 2
2023-08-25 11:35:04 +00:00
matchers :
- type : dsl
dsl :
- 'contains(body_1, "phpdebugbar") && contains(body, "widget")'
2023-08-25 12:47:26 +00:00
- 'contains_all(body_2, "\"utime\"","\"datetime\"","{\"id") && contains(content_type_2, "application/json")'
2023-08-25 11:35:04 +00:00
condition : or
2023-10-20 11:41:13 +00:00
# digest: 4a0a00473045022055cb94f2a7454c92dcfed134429b31582f5c4e40bd7915cb109f7e28c7d3c533022100f1b29be9749442a2831ed29e39e61e64b9050dfa755a41ec6bc38abf7abab8d0:922c64590222798bb761d5b6d8e72950
