mirror of
https://github.com/lunchcat/sif.git
synced 2026-08-01 16:27:37 -07:00
TigahandGitHub
7742b8e731
Detect an exposed Laravel Telescope dashboard, which reveals requests, queries, exceptions and dumped variables. Telescope aborts with 403 before render when gated, so a 200 carrying both the Telescope title and the Vue mount id proves the gate is open. The and-condition on the mount id keeps an unrelated page that merely names telescope, or a soft-404, from matching.
38 lines
806 B
YAML
38 lines
806 B
YAML
# Laravel Telescope Dashboard Exposure Detection Module
|
|
|
|
id: laravel-telescope-exposure
|
|
info:
|
|
name: Laravel Telescope Dashboard Exposure
|
|
author: sif
|
|
severity: high
|
|
description: Detects an exposed Laravel Telescope debug dashboard that reveals requests, queries, exceptions, and dumped variables
|
|
tags: [laravel, telescope, debug, exposure, recon]
|
|
|
|
type: http
|
|
|
|
http:
|
|
method: GET
|
|
paths:
|
|
- "{{BaseURL}}/telescope"
|
|
- "{{BaseURL}}/telescope/requests"
|
|
|
|
matchers:
|
|
- type: status
|
|
status:
|
|
- 200
|
|
|
|
- type: word
|
|
part: body
|
|
words:
|
|
- '<title>Telescope'
|
|
- 'id="telescope" v-cloak'
|
|
condition: and
|
|
|
|
extractors:
|
|
- type: regex
|
|
name: app_name
|
|
part: body
|
|
regex:
|
|
- '<title>Telescope - ([^<]+)</title>'
|
|
group: 1
|