daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Additional matcher for Symfony debug mode

patch-1
sandeep 2021-07-26 17:21:46 +05:30
parent 4a1f85ac76
commit 1b437d300a
1 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
misconfiguration/symfony-debugmode.yaml
View File

@ -1,7 +1,8 @@
id: symfony-debugmode id: symfony-debugmode
info: info:
name: Symfony Debug Mode name: Symfony Debug Mode
author: organiccrap author: organiccrap,pdteam
severity: high severity: high
description: The remote Symfony installations appears to have left the 'debug' interface enabled, allowing the disclosure and possible execution of arbitrary code. description: The remote Symfony installations appears to have left the 'debug' interface enabled, allowing the disclosure and possible execution of arbitrary code.
reference: https://github.com/synacktiv/eos reference: https://github.com/synacktiv/eos
@ -11,16 +12,18 @@ requests:
- method: GET - method: GET
path: path:
- '{{BaseURL}}' - '{{BaseURL}}'
headers:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55 matchers-condition: or
matchers-condition: and
matchers: matchers:
- type: status
status:
- 200
- type: word - type: word
words: words:
- 'X-Debug-Token-Link:' - 'X-Debug-Token-Link:'
- /_profiler/ - '/_profiler/'
part: header part: header
condition: and condition: and
- type: word
words:
- 'debug mode</a> is enabled.'
part: body