Added symfony_fragment_detect.yaml Template

[impalanichamy]

Template / PR Information

while reading symfony framework related vulnerabilities, I came across the following blogs. By appending /_fragment , we could identify fragment page. If we are getting 403 forbidden error or symfony error, we could achieve remote code execution

• Fixed CVE-2020-XXX / Added CVE-2020-XXX / Updated CVE-2020-XXX
• References: https://www.ambionics.io/blog/symfony-secret-fragment https://medium.com/@m4cddr/how-i-got-rce-in-10-websites-26dd87441f22 https://al1z4deh.medium.com/how-i-hacked-28-sites-at-once-rce-5458211048d5 https://github.com/ambionics/symfony-exploits

Template Validation

I've validated this template locally?

• [ ] YES

Additional Details (leave it blank if not applicable)

I used the existing shodan dork

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

[pussycat0x]

Hi @impalanichamy Thank you for sharing this template with the community and for your contribution to this project 🚀 .i have updated the condition and severity, can you check and let me know if it works.

[DhiyaneshGeek]

@pussycat0x we can move this to misconfiguration folder , what you think about it ?

[impalanichamy]

Hi @pussycat0x , Yes, It works fine! Thanks for the edits

[pussycat0x]

PR #5203

[ritikchaddha]

Hello @impalanichamy, thank you so much for sharing this template with the community and contributing to this project 🍻