id: bottle-debug

info:
  name: Bottle debug mode enabled
  author: viondexd
  severity: info
  reference:
    - https://bottlepy.org/docs/dev/tutorial.html#debug-mode
  classification:
    cpe: cpe:2.3:a:bottlepy:bottle:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: bottlepy
    product: bottle
    shodan-query: html:"Sorry, the requested URL"
  tags: bottle,exposure,debug,misconfig

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Sorry, the requested URL "
          - " caused an error:"
        condition: and

      - type: word
        part: body
        words:
          - "<tt>&#039;{{BaseURL}}&#039;</tt>"
          - "<tt>&#039;{{BaseURL}}/&#039;</tt>"
        condition: or
# digest: 490a0046304402201cb38c82fbe7f1178fdda4e9c5471d80c0d598396cc3b2183ea7516b6e5f9fbe0220779c803f4b81ef915efcdfc3e4f5d39b0bb345350fad0d0b57693828042a6360:922c64590222798bb761d5b6d8e72950