http/vulnerabilities/wordpress/wordpress-debug-log.yaml

id: wp-debug-log

info:
  name: WordPress Debug Log - Exposure
  author: geraldino2,dwisiswant0,philippedelteil
  severity: low
  description: Exposed Wordpress debug log.
  metadata:
    max-request: 4
  tags: wp,wordpress,log,exposure

http:
  - method: GET
    path:
      - "{{BaseURL}}/{{paths}}/debug.log"

    payloads:
      paths:
        - 'wp-content'
        - 'wordpress'
        - 'wp'
        - 'blog'

    stop-at-first-match: true
    host-redirects: true
    max-redirects: 3
    max-size: 5000
    matchers-condition: and
    matchers:
      - type: word
        part: header
        words:
          - octet-stream
          - text/plain
        condition: or

      - type: regex
        part: body
        regex:
          - "[[0-9]{2}-[a-zA-Z]{3}-[0-9]{4} [0-9]{2}:[0-9]{2}:[0-9]{2} [A-Z]{3}] PHP"

      - type: status
        status:
          - 200

    extractors:
      - type: dsl
        dsl:
          - to_string(content_length)+ " bytes"
# digest: 490a00463044022040efbeedc82d9d94480ea18ce5f1e102cda95fa01dc99e5aedb1d939447c22e702203605546a92c3dd4a5f3f431b90a29661f6546a20a77e81874238de7dc2a0b01d:922c64590222798bb761d5b6d8e72950
Create wordpress-debug-log.yaml 2020-08-30 12:41:22 -03:00			`id: wp-debug-log`

			`info:`
Update wordpress-debug-log.yaml 2023-12-07 23:55:03 +07:00			`name: WordPress Debug Log - Exposure`
Update wordpress-debug-log.yaml 1-. Added another path 2. Added redirects and max size (sometimes it tries to download the entire file, but this flag it will only download the first 5,000 bytes). 3. Added extractor to show the size of the log. 2023-11-26 18:37:07 -05:00			`author: geraldino2,dwisiswant0,philippedelteil`
severity updates 2020-09-20 18:27:43 +05:30			`severity: low`
Updated descriptions of templates 2024-01-02 21:15:12 +05:30			`description: Exposed Wordpress debug log.`
Added max request counter of each template 2023-04-28 13:41:21 +05:30			`metadata:`
Update wordpress-debug-log.yaml 2023-12-07 23:55:03 +07:00			`max-request: 4`
			`tags: wp,wordpress,log,exposure`
Create wordpress-debug-log.yaml 2020-08-30 12:41:22 -03:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 09:58:59 +05:30			`http:`
Create wordpress-debug-log.yaml 2020-08-30 12:41:22 -03:00			`- method: GET`
			`path:`
Update wordpress-debug-log.yaml 2023-12-07 23:55:03 +07:00			`- "{{BaseURL}}/{{paths}}/debug.log"`

			`payloads:`
			`paths:`
			`- 'wp-content'`
			`- 'wordpress'`
			`- 'wp'`
			`- 'blog'`
fix lint 2023-11-29 18:41:38 +05:30
Update wordpress-debug-log.yaml 1-. Added another path 2. Added redirects and max size (sometimes it tries to download the entire file, but this flag it will only download the first 5,000 bytes). 3. Added extractor to show the size of the log. 2023-11-26 18:37:07 -05:00			`stop-at-first-match: true`
			`host-redirects: true`
			`max-redirects: 3`
			`max-size: 5000`
Update wordpress-debug-log.yaml 2020-08-30 21:27:24 +05:30			`matchers-condition: and`
Create wordpress-debug-log.yaml 2020-08-30 12:41:22 -03:00			`matchers:`
			`- type: word`
Update wordpress-debug-log.yaml 2023-12-07 23:55:03 +07:00			`part: header`
Create wordpress-debug-log.yaml 2020-08-30 12:41:22 -03:00			`words:`
			`- octet-stream`
			`- text/plain`
			`condition: or`
generic improvements 2021-07-24 00:06:13 +05:30
:hammer: Add regex matcher for time_local at body 2020-08-31 17:35:45 +07:00			`- type: regex`
Update wordpress-debug-log.yaml 2023-12-07 23:55:03 +07:00			`part: body`
:hammer: Add regex matcher for time_local at body 2020-08-31 17:35:45 +07:00			`regex:`
			`- "[[0-9]{2}-[a-zA-Z]{3}-[0-9]{4} [0-9]{2}:[0-9]{2}:[0-9]{2} [A-Z]{3}] PHP"`
generic improvements 2021-07-24 00:06:13 +05:30
Create wordpress-debug-log.yaml 2020-08-30 12:41:22 -03:00			`- type: status`
			`status:`
templateman update 2023-10-14 16:57:55 +05:30			`- 200`
fix lint 2023-11-29 18:41:38 +05:30
Update wordpress-debug-log.yaml 1-. Added another path 2. Added redirects and max size (sometimes it tries to download the entire file, but this flag it will only download the first 5,000 bytes). 3. Added extractor to show the size of the log. 2023-11-26 18:37:07 -05:00			`extractors:`
			`- type: dsl`
			`dsl:`
			`- to_string(content_length)+ " bytes"`
chore: sign templates 🤖 2024-12-01 13:57:55 +00:00			`# digest: 490a00463044022040efbeedc82d9d94480ea18ce5f1e102cda95fa01dc99e5aedb1d939447c22e702203605546a92c3dd4a5f3f431b90a29661f6546a20a77e81874238de7dc2a0b01d:922c64590222798bb761d5b6d8e72950`