id: php-errors

info:
  name: PHP errors
  author: w4cky_,geeknik,dhiyaneshDK
  severity: info
  classification:
    cpe: cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
    cwe-id: CWE-209
  metadata:
    max-request: 1
    vendor: php
    product: php
    shodan-query: http.title:"PHP warning" || "Fatal error"
  tags: debug,php,misconfig,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    extractors:
      - type: regex
        regex:
          - '(?i)Fatal error'
          - '(?i)Call to undefined method'
          - '(?i)You have an error in your SQL syntax'
          - '(?i)MySQL server version for the right syntax to use near'
          - '(?i)MySQL cannot create a temporary file'
          - '(?i)PHP (Warning|Error)'
          - '(?m)^<title>([a-z /A-Z.(0-9):]+)?PHP warning([a-z /A-Z.(0-9):]+)?<\/title>$'
          - '(?i)Warning\: (pg|mysql)_(query|connect)\(\)'
          - '(?i)failed to open stream\:'
          - '(?i)SAFE MODE Restriction in effect'
          - '(?i)Cannot modify header information'
          - '(?i)ORA-00921\: unexpected end of SQL command'
          - '(?i)ORA-00933\: SQL command not properly ended'
          - '(?i)ORA-00936\: missing expression'
          - '(?i)ORA-12541\: TNS\:no listener'
          - '(?i)uncaught exception'
          - '(?i)include_path'
          - '(?i)undefined index'
          - '(?i)undefined variable\:'
          - '(?i)stack trace\:'
          - '(?i)expects parameter [0-9]*'
          - '(?i)Debug Trace'
          - '(?i)<b>Parse error</b>'
          - '(?i)syntax error, unexpected'
          - '(?i)Allowed Memory Size of \d* Bytes Exhausted'
          - '(?i)Maximum execution time of \d* seconds exceeded'
# digest: 4b0a00483046022100e117fc725dd5b5af4bd4b0f0214e7378ca4bd0d20662c3a6eba821431d6f1330022100992f157555bb0be239878a5eb5d8eb67e5cdfc87e9ccae3fb8e9f478fc82bba4:922c64590222798bb761d5b6d8e72950