nuclei-templates/exposures/logs/django-debug-exposure.yaml

30 lines
550 B
YAML
Raw Normal View History

2021-08-17 12:07:57 +00:00
id: django-debug-exposure
info:
name: Django Debug Exposure
author: geeknik
severity: high
reference:
- https://twitter.com/Alra3ees/status/1397660633928286208
2021-08-17 12:07:57 +00:00
tags: django,exposure
requests:
- method: POST
path:
- "{{BaseURL}}/admin/login/?next=/admin/"
matchers-condition: and
matchers:
- type: status
status:
- 500
- type: word
part: body
words:
- "DB_HOST"
- "DB_NAME"
- "DJANGO"
- "ADMIN_PASSWORD"
condition: and