Detected sites that show the Laravel debug panel on malformed URLs

2024-08-06 08:05:00 +02:00 · 2024-08-06 08:05:00 +02:00 · b379c3148e
parent 28641724a4
commit b379c3148e
1 changed files with 4 additions and 5 deletions
--- a/http/misconfiguration/laravel-debug-error.yaml
+++ b/http/misconfiguration/laravel-debug-error.yaml
@ -13,14 +13,13 @@ http:
  - method: GET
    path:
      - "{{BaseURL}}"
+      - "{{BaseURL}}///////this-should-not-exist,.<>!@#$%^&*()_+"
+      - "{{BaseURL}}/%00"

    matchers-condition: and
    matchers:
      - type: word
        words:
-          - Whoops! There was an error
+          - <title>Whoops! There was an error

-      - type: status
-        status:
-          - 500
-# digest: 4b0a00483046022100a27980313b04765c0889cf3781ae98a717537c8bf226181548f1befb4b88bc0b022100b5c1947c8918d39d6a6e27b7917edc78bb098d331d886b26e3ac00da1603a76c:922c64590222798bb761d5b6d8e72950
+# digest: 4b0a00483046022100a27980313b04765c0889cf3781ae98a717537c8bf226181548f1befb4b88bc0b022100b5c1947c8918d39d6a6e27b7917edc78bb098d331d886b26e3ac00da1603a76c:922c64590222798bb761d5b6d8e72950