www-project-asvs-security-evaluation-templates-with-nuclei/templates/workflows/14.3.2.yaml at dev · OWASP/www-project-asvs-security-evaluation-templates-with-nuclei · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
id: ASVS-4-0-3-V14-3-2

info:
  name: ASVS 14.3.2 Check
  author: Hamed Salimian
  severity: low
  classification:
    cwe-id: CWE-497
  reference:
    - https://cheatsheetseries.owasp.org/cheatsheets/Error_Handling_Cheat_Sheet.html
  tags: asvs,14.3.2,debug
  description: |
    Verify that web or application server and application framework debug modes are disabled in production to eliminate debug features, developer consoles, and unintended security disclosures.

workflows:
  - template: workflows/misconfiguration/symfony-debug.yaml
  - template: workflows/exposures/logs/rails-debug-mode.yaml
  - template: workflows/misconfiguration/debug/bottle-debug.yaml
  - template: workflows/misconfiguration/debug/ampache-debug.yaml
  - template: workflows/misconfiguration/laravel-debug-enabled.yaml
  - template: workflows/misconfiguration/laravel-debug-infoleak.yaml
  - template: workflows/misconfiguration/laravel-debug-error.yaml
  - template: workflows/misconfiguration/aspx-debug-mode.yaml
  - template: workflows/exposures/logs/jboss-seam-debug-page.yaml
  - template: workflows/misconfiguration/struts-ognl-console.yaml
  - template: workflows/exposures/logs/struts-problem-report.yaml
  - template: workflows/misconfiguration/sitecore-debug-page.yaml
  - template: workflows/exposures/logs/django-debug-exposure.yaml
  - template: workflows/misconfiguration/rekognition-image-validation.yaml
  - template: workflows/misconfiguration/browserless-debugger.yaml
  - template: workflows/exposures/logs/struts-debug-mode.yaml
  - template: workflows/misconfiguration/django-debug-detect.yaml
  - template: workflows/misconfiguration/airflow/airflow-debug.yaml
  - template: workflows/misconfiguration/php-debugbar-exposure.yaml
  - template: workflows/misconfiguration/wamp-xdebug-detect.yaml
  - template: workflows/misconfiguration/typo3-debug-mode.yaml
  - template: workflows/exposures/logs/pyramid-debug-toolbar.yaml
  - template: workflows/misconfiguration/php-errors.yaml
  - template: workflows/vulnerabilities/jenkins/jenkins-stack-trace.yaml
  - template: workflows/technologies/werkzeug-debugger-detect.yaml