Delete http/exposures/configs/symfony-profiler-exposed.yaml
parent
0f165ce9ce
commit
5a657fa755
|
@ -1,50 +0,0 @@
|
||||||
id: symfony-profiler
|
|
||||||
|
|
||||||
info:
|
|
||||||
name: Symfony Profiler - Exposure
|
|
||||||
author: pdteam
|
|
||||||
severity: high
|
|
||||||
description: Symfony profiler was detected.
|
|
||||||
reference:
|
|
||||||
- https://symfony.com/doc/current/profiler.html
|
|
||||||
classification:
|
|
||||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
|
||||||
cvss-score: 7.5
|
|
||||||
cwe-id: CWE-200
|
|
||||||
metadata:
|
|
||||||
verified: true
|
|
||||||
max-request: 19
|
|
||||||
shodan-query: html:"symfony Profiler"
|
|
||||||
tags: config,exposure,symfony,debug
|
|
||||||
|
|
||||||
http:
|
|
||||||
- method: GET
|
|
||||||
path:
|
|
||||||
- "{{BaseURL}}/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/app_dev.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/index.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/index_dev.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/dev.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/debug.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/_debug/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/web/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/public/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/frontend_dev.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/backend_dev.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/api_dev.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/app.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/app_test.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/test.php/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/symfony/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/debug/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/dev/_profiler/empty/search/results?limit=10"
|
|
||||||
- "{{BaseURL}}/profiler/empty/search/results?limit=10"
|
|
||||||
|
|
||||||
stop-at-first-match: true
|
|
||||||
matchers:
|
|
||||||
- type: dsl
|
|
||||||
dsl:
|
|
||||||
- 'contains_any(body, "Symfony Profiler", "<title>Profiler</title>", "Symfony-Debug-Toolbar")'
|
|
||||||
- 'contains_any(body, "Profile Search</h2>")'
|
|
||||||
- 'status_code == 200'
|
|
||||||
condition: and
|
|
Loading…
Reference in New Issue