Merge pull request #8578 from Lucky-Pulse/tomcat-stacktraces

Added Apache Tomcat Stack Trace Detection Template

http/misconfiguration/tomcat-stacktraces.yaml

@@ -0,0 +1,26 @@
+id: tomcat-stacktraces
+
+info:
+  name: Tomcat Stack Traces Enabled
+  author: lucky0x0d
+  severity: info
+  description: |
+    Examine whether Tomcat stack traces are turned on by employing a designated problematic pattern.
+  metadata:
+    verified: true
+    shodan-query: title:"Apache Tomcat"
+    max-request: 1
+  tags: tech,tomcat,apache
+
+http:
+  - method: GET
+    path:
+      - '{{BaseURL}}/?f=\['
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(body, "tomcat")'
+          - 'contains(body, "org.apache")'
+          - status_code == 400
+        condition: and