id: woodwing-phpinfo

info:
  name: Woodwing Studio Server - Phpinfo Config
  author: pdteam
  severity: medium
  description: Phpinfo Config file exposed in Woodwing Studio Server.
  reference:
    - https://twitter.com/ynsmroztas/status/1680961398011047936
  metadata:
    max-request: 2
    shodan-query: http.title:"WoodWing Studio Server"
    fofa-query: title=="WoodWing Studio Server"
  tags: misconfig,woodwing,phpinfo

http:
  - method: GET
    path:
      - "{{BaseURL}}/StudioServer/server/wwtest/phpinfo.php"
      - "{{BaseURL}}/server/wwtest/phpinfo.php"

    stop-at-first-match: true
    redirects: true
    max-redirects: 2
    matchers:
      - type: dsl
        dsl:
          - contains(tolower(body), 'woodwing')
          - contains(tolower(body), 'php extension')
          - contains(tolower(body), 'php version')
          - status_code == 200
        condition: and
# digest: 4a0a00473045022040835cc218891b38bf8ba9016e8fca78ee6b000b3f594894331ccf9186a0154e022100b2482ef79d156fd0f1737211f7c6ee629a2c0b9257e028ce01deb45ab16b16e4:922c64590222798bb761d5b6d8e72950