patch-4
NaN 2024-05-17 15:24:58 -07:00
parent acc747e704
commit 3c063d0a3a
No known key found for this signature in database
GPG Key ID: DDB5FB025137B844
1 changed files with 18 additions and 21 deletions

View File

@ -1,19 +1,19 @@
---
id: apache-server-status-localhost id: apache-server-status-localhost
info: info:
name: Server Status Disclosure name: Server Status Disclosure
author: pdteam,geeknik,NaN-kl author: pdteam,geeknik,NaN-kl
severity: low severity: low
description: Apache Server Status page is exposed, which may contain information about pages visited by the users, their IPs or sensitive information such as session tokens. description: Apache Server Status page is exposed, which may contain information
about pages visited by the users, their IPs or sensitive information such as
session tokens.
metadata: metadata:
max-request: 2 max-request: 2
tags: apache,debug,misconfig tags: apache,debug,misconfig
http: http:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/server-status" - "{{BaseURL}}/server-status"
headers: {}
matchers: matchers:
- type: status - type: status
status: status:
@ -21,25 +21,22 @@ http:
- 404 - 404
- method: GET - method: GET
headers: headers:
Forwarded: "127.0.0.1" Forwarded: 127.0.0.1
X-Client-IP: "127.0.0.1" X-Client-IP: 127.0.0.1
X-Forwarded-By: "127.0.0.1" X-Forwarded-By: 127.0.0.1
X-Forwarded-For: "127.0.0.1" X-Forwarded-For: 127.0.0.1
X-Forwarded-For-IP: "127.0.0.1" X-Forwarded-For-IP: 127.0.0.1
X-Forwarded-Host: "127.0.0.1" X-Forwarded-Host: 127.0.0.1
X-Host: "127.0.0.1" X-Host: 127.0.0.1
X-Originating-IP: "127.0.0.1" X-Originating-IP: 127.0.0.1
X-Remote-Addr: "127.0.0.1" X-Remote-Addr: 127.0.0.1
X-Remote-IP: "127.0.0.1" X-Remote-IP: 127.0.0.1
X-True-IP: "127.0.0.1" X-True-IP: 127.0.0.1
path: path:
- "{{BaseURL}}/server-status" - "{{BaseURL}}/server-status"
matchers: matchers:
- type: word - type: word
words: words:
- "Apache Server Status" - Apache Server Status
- "Server Version" - Server Version
condition: and condition: and
# digest: 4a0a00473045022100978e79f5293059d77d7f12996faeb5e7327979bbdc03480dfaa632ce3692895002201fd20b313ef4e49782dca03918a3d53e057bdec80e366451c875c462b9992e8d:922c64590222798bb761d5b6d8e72950