id: laravel-debug-enabled info: name: Laravel Debug Enabled author: notsoevilweasel severity: medium description: Laravel with APP_DEBUG set to true is prone to show verbose errors. tags: debug,laravel,misconfig requests: - method: GET path: - "{{BaseURL}}/_ignition/health-check" matchers-condition: and matchers: - type: word words: - can_execute_commands - type: status status: - 200