Additional matcher for Symfony debug mode

misconfiguration/symfony-debugmode.yaml

@@ -1,7 +1,8 @@
 id: symfony-debugmode
+
 info:
   name: Symfony Debug Mode
-  author: organiccrap
+  author: organiccrap,pdteam
   severity: high
   description: The remote Symfony installations appears to have left the 'debug' interface enabled, allowing the disclosure and possible execution of arbitrary code.
   reference: https://github.com/synacktiv/eos
@@ -11,16 +12,18 @@ requests:
   - method: GET
     path:
       - '{{BaseURL}}'
-    headers:
-      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
-    matchers-condition: and
+
+    matchers-condition: or
     matchers:
-      - type: status
-        status:
-          - 200
+
       - type: word
         words:
           - 'X-Debug-Token-Link:'
-          - /_profiler/
+          - '/_profiler/'
         part: header
         condition: and
+
+      - type: word
+        words:
+          - 'debug mode</a> is enabled.'
+        part: body