Merge pull request #371 from geraldino2/master

Add checks for public Wordpress debug.log

files/wordpress-debug-log.yaml

@@ -0,0 +1,24 @@
+id: wp-debug-log
+
+info:
+  name: WordPress debug log
+  author: geraldino2
+  severity: info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp-content/debug.log"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - octet-stream
+          - text/plain
+        part: header
+        condition: or
+
+      - type: status
+        status:
+          - 200

workflows/wordpress-workflow.yaml

@@ -11,6 +11,7 @@ variables:
   wordpress_duplicator_path_traversal: vulnerabilities/wordpress-duplicator-path-traversal.yaml
   wordpress_wordfence_xss: vulnerabilities/wordpress-wordfence-xss.yaml
   wordpress_cve_1: cves/CVE-2019-9978.yaml
+  wordpress_debug_log: files/wordpress-debug-log.yaml
 
 logic: |
   wordpress_tech()
@@ -23,4 +24,5 @@ logic: |
     wordpress_duplicator_path_traversal()
     wordpress_wordfence_xss()
     wordpress_cve_1()
+    wordpress_debug_log()
   }