id: snoop-servlet

info:
  name: Snoop Servlet - Information Disclosure
  author: omranisecurity
  severity: low
  description: |
    The Snoop Servlet returns information about the HTTP request itself and sometimes. It could help an attacker to prepare more advanced attacks.
  reference:
    - https://www.acunetix.com/vulnerabilities/\web/snoop-servlet-information-disclosure/
  metadata:
    max-request: 1
    shodan-query: title:"Snoop Servlet"
    fofa-query: title="Snoop Servlet"
  tags: config,exposure,snoop,snoop-servlet

http:
  - method: GET
    path:
      - "{{BaseURL}}/snoop"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(body, "Snoop Servlet - Request/Client Information")'
        condition: and
# digest: 4a0a0047304502201e8b5dad3b8f172b29eef374f09ed91910f54c8e3672876ae1f855ff5374154402210095e4758eaef58236e2614910cb3d32916a95fa7c51b456beb130acd1e82714c1:922c64590222798bb761d5b6d8e72950