nuclei-templates/security-misconfiguration/rack-mini-profiler.yaml

id: rack-mini-profiler

info:
  name: rack-mini-profiler environmnet information discloure
  author: vzamanillo
  severity: high

requests:
  - method: GET
    path:
      - "{{BaseURL}}/?pp=env"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Rack Environment"
      - type: status
        status:
          - 200
Typo in gem name 2020-06-01 18:47:29 +00:00			`id: rack-mini-profiler`
rack-mini-profiler environment information discloure detection template Ruby Rack based web applications using rack-mini-profiler without access control can show application’s environment details 2020-05-31 15:39:48 +00:00
			`info:`
			`name: rack-mini-profiler environmnet information discloure`
			`author: vzamanillo`
			`severity: high`

			`requests:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}/?pp=env"`
fixing few last one 2020-07-11 06:32:02 +00:00
			`matchers-condition: and`
rack-mini-profiler environment information discloure detection template Ruby Rack based web applications using rack-mini-profiler without access control can show application’s environment details 2020-05-31 15:39:48 +00:00			`matchers:`
			`- type: word`
			`words:`
			`- "Rack Environment"`
			`- type: status`
			`status:`
			`- 200`