id: woodwing-phpinfo

info:
  name: Woodwing Studio Server - Phpinfo Config
  author: pdteam
  severity: medium
  description: Phpinfo Config file exposed in Woodwing Studio Server.
  reference:
    - https://twitter.com/ynsmroztas/status/1680961398011047936
  metadata:
    max-request: 2
    shodan-query: http.title:"WoodWing Studio Server"
    fofa-query: title=="WoodWing Studio Server"
  tags: misconfig,woodwing,phpinfo,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/StudioServer/server/wwtest/phpinfo.php"
      - "{{BaseURL}}/server/wwtest/phpinfo.php"

    stop-at-first-match: true
    redirects: true
    max-redirects: 2
    matchers:
      - type: dsl
        dsl:
          - contains(tolower(body), 'woodwing')
          - contains(tolower(body), 'php extension')
          - contains(tolower(body), 'php version')
          - status_code == 200
        condition: and
# digest: 490a0046304402201aa899481df57a0259c7c8e0999e092d2e4fa0821af63a26d84e7bca2e32112c0220495afe75df11a7f55a24b4dfb04bdb06ee9aedd631c0871ff8641cf7cfe4fb8b:922c64590222798bb761d5b6d8e72950