id: bottle-debug

info:
  name: Bottle debug mode enabled
  author: viondexd
  severity: info
  reference:
    - https://bottlepy.org/docs/dev/tutorial.html#debug-mode
  classification:
    cpe: cpe:2.3:a:bottlepy:bottle:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: bottlepy
    product: bottle
    shodan-query: html:"Sorry, the requested URL"
  tags: bottle,exposure,debug,misconfig,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Sorry, the requested URL "
          - " caused an error:"
        condition: and

      - type: word
        part: body
        words:
          - "<tt>&#039;{{BaseURL}}&#039;</tt>"
          - "<tt>&#039;{{BaseURL}}/&#039;</tt>"
        condition: or
# digest: 4a0a0047304502210095c2f3d0c179811aca4694ab34845036b9e183bcf2ecfd98d1ddd3959c603de502205e2bbd4f13a70a333d8a13d2efaeaff087f6c8a074bc3486c56015869bd3dccc:922c64590222798bb761d5b6d8e72950