Skip to content
Nuclei Templates

Laravel Debug Enabled

ID: laravel-debug-enabled

Severity: medium

Author: notsoevilweasel

Tags: debug,laravel,misconfig

Description

Section titled “Description”

Laravel with APP_DEBUG set to true is prone to show verbose errors.

YAML Source

Section titled “YAML Source”
id: laravel-debug-enabled


info:
  name: Laravel Debug Enabled
  author: notsoevilweasel
  severity: medium
  description: |
    Laravel with APP_DEBUG set to true is prone to show verbose errors.
  remediation: |
    Disable Laravel's debug mode by setting APP_DEBUG to false.
  metadata:
    max-request: 1
  tags: debug,laravel,misconfig


http:
  - method: GET
    path:
      - "{{BaseURL}}/_ignition/health-check"


    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - can_execute_commands


      - type: status
        status:
          - 200
# digest: 4b0a00483046022100ffc58d1929eef28db5ddec42dc673b3dd3bb5dd832a81fb994be7f508ab0237c02210091df7e6c48f5bc115f975585dbc0a81b1d267c49813cff44b84e705c5669410e:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/laravel-debug-enabled.yaml"

View on Github