id: woodwing-phpinfo

info:
  name: Woodwing Studio Server - Phpinfo Config
  author: pdteam
  severity: medium
  description: Phpinfo Config file exposed in Woodwing Studio Server.
  reference:
    - https://twitter.com/ynsmroztas/status/1680961398011047936
  metadata:
    max-request: 2
    shodan-query: http.title:"WoodWing Studio Server"
    fofa-query: title=="WoodWing Studio Server"
  tags: misconfig,woodwing,phpinfo

http:
  - method: GET
    path:
      - "{{BaseURL}}/StudioServer/server/wwtest/phpinfo.php"
      - "{{BaseURL}}/server/wwtest/phpinfo.php"

    stop-at-first-match: true
    redirects: true
    max-redirects: 2
    matchers:
      - type: dsl
        dsl:
          - contains(tolower(body), 'woodwing')
          - contains(tolower(body), 'php extension')
          - contains(tolower(body), 'php version')
          - status_code == 200
        condition: and
# digest: 4a0a00473045022034c592f665b23abe3b7784ebf131a0c74946f75bc828985ef4a9eaf5c0c1f47a022100f7402c98b84871a7c560fdcc528e2b9f633041d026fbd1d571a002d5ff5311a5:922c64590222798bb761d5b6d8e72950