diff --git a/exposures/logs/fastcgi-echo.yaml b/exposures/logs/fastcgi-echo.yaml
new file mode 100644
index 0000000000..3c178f7213
--- /dev/null
+++ b/exposures/logs/fastcgi-echo.yaml
@@ -0,0 +1,36 @@
+id: fastcgi-echo
+
+info:
+  name: Fastcgi Echo Endpoint Exposure
+  author: powerexploit
+  severity: info
+  description: |
+    FastCGI module delivered with the Apache httpd server that is incorporated into the Oracle Application Server.FastCGI echo programs (echo and echo2) should be always removed or disabled in all Oracle Application Servers implementations as they can provide information at an attacker
+  reference:
+    - https://www.exploit-db.com/ghdb/183
+    - https://www.integrigy.com/oracle-application-server-fastcgi-echo-vulnerability-reports
+  metadata:
+    verified: true
+    google-dork: inurl:fcgi-bin/echo
+  tags: exposure,logs,oracle,fastcgi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/fcgi-bin/echo"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "<title>FastCGI echo</title>"
+
+      - type: word
+        part: header
+        words:
+          - "text/html"
+
+      - type: status
+        status:
+          - 200