id: apcu-service

info:
  name: APCu service information leakage
  author: koti2
  severity: low
  description: APCu service is vulnerable to information leakage.
  metadata:
    max-request: 2
  tags: config,service,apcu,misconfig,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/apc/apc.php"
      - "{{BaseURL}}/apc.php"

    stop-at-first-match: true
    matchers:
      - type: word
        words:
          - "APCu Version Information"
          - "General Cache Information"
          - "Detailed Memory Usage and Fragmentation"
        condition: or
# digest: 4b0a00483046022100e594c7fd3457b2a0a1b304c29fbd0b55305184e9957491552966670af65a641c022100ae7ce5607acd712ed5f3344d0765a732d37087fb2ed20b71998631794a626816:922c64590222798bb761d5b6d8e72950