Skip to content
Nuclei Templates

Woodwing Studio Server - Phpinfo Config

ID: woodwing-phpinfo

Severity: medium

Author: pdteam

Tags: misconfig,woodwing,phpinfo

Description

Section titled “Description”

Phpinfo Config file exposed in Woodwing Studio Server.

YAML Source

Section titled “YAML Source”
id: woodwing-phpinfo


info:
  name: Woodwing Studio Server - Phpinfo Config
  author: pdteam
  severity: medium
  description: Phpinfo Config file exposed in Woodwing Studio Server.
  reference:
    - https://twitter.com/ynsmroztas/status/1680961398011047936
  metadata:
    max-request: 2
    shodan-query: http.title:"WoodWing Studio Server"
    fofa-query: title=="WoodWing Studio Server"
  tags: misconfig,woodwing,phpinfo


http:
  - method: GET
    path:
      - "{{BaseURL}}/StudioServer/server/wwtest/phpinfo.php"
      - "{{BaseURL}}/server/wwtest/phpinfo.php"


    stop-at-first-match: true
    redirects: true
    max-redirects: 2
    matchers:
      - type: dsl
        dsl:
          - contains(tolower(body), 'woodwing')
          - contains(tolower(body), 'php extension')
          - contains(tolower(body), 'php version')
          - status_code == 200
        condition: and
# digest: 4a0a00473045022040835cc218891b38bf8ba9016e8fca78ee6b000b3f594894331ccf9186a0154e022100b2482ef79d156fd0f1737211f7c6ee629a2c0b9257e028ce01deb45ab16b16e4:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/misconfiguration/woodwing-phpinfo.yaml"

View on Github