laravel-terminal-exposure: Laravel Terminal - Exposed

id: laravel-terminal-exposure

info:
  name: Laravel Terminal - Exposed
  author: pussycat0x
  severity: high
  description: |
    The web application was built on the Laravel framework, with Laravel Terminal enabled and publicly accessible; this was detected in the production environment and led to disclosure of sensitive application information.
  reference:
    - https://github.com/recca0120/laravel-terminal
    - https://www.acunetix.com/vulnerabilities/web/laravel-terminal-open/
  metadata:
    max-request: 1
    verified: false
  tags: laravel,terminal,exposure,misconfig,rce,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/asf/terminal"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Laravel Terminal"
          - "terminal.endpoint"
        condition: or

      - type: status
        status:
          - 200
# digest: 4a0a004730450221009fa9ce580957f48b1f90efcdda9774da5b818605f59d8e27dbbf68624381c1e102206a474d189e4d30c7369fdec171d3a3c87e86434b08ed78a990cc7a3168dbb234:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.