nuclei-templates/misconfiguration/symfony-debugmode.yaml

id: symfony-debugmode
info:
  name: Symfony Debug Mode
  author: organiccrap
  severity: high
  description: The remote Symfony installations appears to have left the 'debug' interface enabled, allowing the disclosure and possible execution of arbitrary code.
  reference: https://github.com/synacktiv/eos
  tags: symfony,debug

requests:
  - method: GET
    path:
      - '{{BaseURL}}'
    headers:
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: word
        words:
          - 'X-Debug-Token-Link:'
          - /_profiler/
        part: header
        condition: and
updates 2020-07-02 13:53:41 +00:00			`id: symfony-debugmode`
			`info:`
			`name: Symfony Debug Mode`
			`author: organiccrap`
			`severity: high`
Description 2021-05-02 06:13:37 +00:00			`description: The remote Symfony installations appears to have left the 'debug' interface enabled, allowing the disclosure and possible execution of arbitrary code.`
adding tags to misconfiguration 2021-03-12 08:57:14 +00:00			`reference: https://github.com/synacktiv/eos`
			`tags: symfony,debug`

updates 2020-07-02 13:53:41 +00:00			`requests:`
			`- method: GET`
			`path:`
BaseURL updates 2021-01-14 14:41:56 +00:00			`- '{{BaseURL}}'`
updates 2020-07-02 13:53:41 +00:00			`headers:`
			`User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55`
			`matchers-condition: and`
			`matchers:`
			`- type: status`
			`status:`
			`- 200`
			`- type: word`
			`words:`
			`- 'X-Debug-Token-Link:'`
			`- /_profiler/`
			`part: header`
			`condition: and`