id: php-composer-binary

info:
  name: PHP Composer Binary - Exposure
  author: mayank_pandey01
  severity: info
  description: |
    This Nuclei template checks if the specified endpoints have publically accessible PHP Composer Binary.
  remediation: |
    Restrict access to the PHP Composer binary by implementing proper access controls and permissions.
  metadata:
    verified: true
    max-request: 1
  tags: php,composer,exposure

http:
  - method: GET
    path:
      - "{{BaseURL}}/composer"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "/usr/bin/env php"
          - "<?php"
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100edb18d217d04ecd7c1a09a505b6e3b17a6a7d8c0ab8b615fefc1bd672941cd18022100cca4fbffd08a307dd320e935ecfefbf50fca6dfb1ab42a6f16422d3dd124e06b:922c64590222798bb761d5b6d8e72950