pyramid-debug-toolbar: Pyramid Debug Toolbar

漏洞描述

Pyramid Debug Toolbar provides a debug toolbar useful while you are developing your Pyramid application.

PoC代码[已公开]

id: pyramid-debug-toolbar

info:
  name: Pyramid Debug Toolbar
  author: geeknik
  severity: medium
  description: Pyramid Debug Toolbar provides a debug toolbar useful while you are developing your Pyramid application.
  reference:
    - https://github.com/Pylons/pyramid_debugtoolbar
  metadata:
    max-request: 1
  tags: pyramid,logs,exposure,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/_debug_toolbar/"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "<title>Pyramid Debug Toolbar</title>"
          - "Pyramid DebugToolbar</a>"
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100f0c5bde3bbca40cc322c7d3d64a4f56f462fed5cc70ff8e81c4de661110aa1e8022033af2a8a46e8ea333e350fe7cbf77df2987c3f0ebbeadb34e5500b025c6022c3:922c64590222798bb761d5b6d8e72950

来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/logs/pyramid-debug-toolbar.yaml