PHPinfo Page - Detect

ID: phpinfo-files

Severity: low

Author: pdteam,daffainfo,meme-lord,dhiyaneshDK,wabafet,mastercho

Tags: config,exposure,phpinfo

Description

PHPinfo page was detected. The output of the phpinfo() command can reveal sensitive and detailed PHP environment information.

YAML Source

id: phpinfo-files

info:
  name: PHPinfo Page - Detect
  author: pdteam,daffainfo,meme-lord,dhiyaneshDK,wabafet,mastercho
  severity: low
  description: |
    PHPinfo page was detected. The output of the phpinfo() command can reveal sensitive and detailed PHP environment information.
  remediation: Remove PHP Info pages from publicly accessible sites, or restrict access to authorized users only.
  classification:
    cwe-id: CWE-200
  metadata:
    max-request: 25
  tags: config,exposure,phpinfo

http:
  - method: GET
    path:
      - "{{BaseURL}}{{paths}}"
    payloads:
      paths:
        - "/php.php"
        - "/php2.php"
        - "/phpinfo.php"
        - "/info.php"
        - "/infophp.php"
        - "/php_info.php"
        - "/test.php"
        - "/i.php"
        - "/a.php"
        - "/p.php"
        - "/pi.php"
        - "/asdf.php"
        - "/pinfo.php"
        - "/phpversion.php"
        - "/time.php"
        - "/inf0.php"
        - "/index.php"
        - "/temp.php"
        - "/old_phpinfo.php"
        - "/infos.php"
        - "/linusadmin-phpinfo.php"
        - "/php-info.php"
        - "/dashboard/phpinfo.php"
        - "/_profiler/phpinfo.php"
        - "/_profiler/phpinfo"
        - "/?phpinfo=1"
        - "/l.php?act=phpinfo"

    stop-at-first-match: true

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "PHP Extension"
          - "PHP Version"
        condition: and

      - type: status
        status:
          - 200

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - '>PHP Version <\/td><td class="v">([0-9.]+)'
# digest: 4a0a00473045022100b9a3e9d7e20eb38ebae62dd34debac320230cb45ba84e026d6238f53c16a43be02203a32a728f8865d4547dfb2ccbd0020847b6f1d303601fc8a43d7de8cc360e326:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposures/configs/phpinfo-files.yaml"

View on Github