漏洞描述
Exposes server status,logs and internal information.
id: event-debug-server-status
info:
name: Event Debug Server Status
author: pussycat0x
severity: low
description: Exposes server status,logs and internal information.
metadata:
verified: true
max-request: 1
shodan-query: title:"Event Debug Server"
tags: event,exposure,debug,vuln
http:
- method: GET
path:
- '{{BaseURL}}'
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<h1>Event Debug Server Status</h1>'
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- 'Version: <tt>([0-9.]+)'
# digest: 490a0046304402202c3c88f8910c4f1566596076f75cc636879ffb6e0b2fc5181be0904584e4706602204efd4c08274332870a5ac054b0ae5f8998377c2fba145bcd538f98740de04448:922c64590222798bb761d5b6d8e72950