Investigating the Security Risks of Enabled Debug Mode in Publicly Accessible Environments
摘要
Web frameworks use debug mode features to identify errors, see stack traces and details regarding the functioning of the web application. Keeping this feature enabled in a live production environment risk making the application vulnerable to being compromised. This study looks at the risks of keeping the debug mode enabled in popular frameworks such as Django, Laravel, Symfony, Struts and CakePHP. By using Shodan, Censys and Criminal IP search engines we were able to identify thousands of exposed enabled debug mode configurations around the world and analyze their prevalence. We have used Advanced fingerprinting techniques to categorize vulnerabilities and assess their risks. The results prove that improper debug settings can leak information such as database connection strings, system environment variables and server architecture details. In the worst-case scenarios, it can lead to fully compromising the server through remote code execution. The research illustrates industries and regions most impacted by this vulnerability, assisted by statistical analysis. It shows how important it is to use automated scanning tools for identifying the vulnerability and suggests actionable ways to solve and fix debug mode related risks.