id: bottle-debug

info:
  name: Bottle debug mode enabled
  author: viondexd
  severity: info
  reference:
    - https://bottlepy.org/docs/dev/tutorial.html#debug-mode
  classification:
    cpe: cpe:2.3:a:bottlepy:bottle:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: bottlepy
    product: bottle
    shodan-query: html:"Sorry, the requested URL"
  tags: bottle,exposure,debug,misconfig

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Sorry, the requested URL "
          - " caused an error:"
        condition: and

      - type: word
        part: body
        words:
          - "<tt>&#039;{{BaseURL}}&#039;</tt>"
          - "<tt>&#039;{{BaseURL}}/&#039;</tt>"
        condition: or
# digest: 4b0a004830460221008e01ca7bb0f2009ce111a48c15e198e0da5eac0517808986fd70585b80ca7770022100bba040829960b1e3f9f2061a07af33e8a1430a2a2365f767d699df49db484136:922c64590222798bb761d5b6d8e72950