id: phpinfo-files

info:
  name: phpinfo Disclosure
  author: bauthard
  severity: low

requests:
  - method: GET
    path: 
      - "{{BaseURL}}/php.php"
      - "{{BaseURL}}/phpinfo.php"
      - "{{BaseURL}}/info.php"
      - "{{BaseURL}}/_profiler/phpinfo"
    matchers:
      - type: word
        words: 
          - "PHP Extension"
          - "PHP Version"
        condition: and