dbgdtct 是一款基于 Python 的工具,旨在帮助您检测 Web 应用程序是否以调试模式部署——这是一种严重的错误配置,可能会暴露敏感信息并增加生产环境中被利用的风险。
git clone https://github.com/yousseflahouifi/dbdtct.git
创建虚拟环境
python3 -m venv myenv
source myenv/bin/activate
安装包
pip3 install aiohttp requests
扫描单个目标应用程序
python dbdtct.py -u https://target.com
扫描多个目标和 URL
python dbdtct.py -l list.txt
python dbdtct.py -u https://target.com
,--.,--. ,--. ,--. ,--.
,-| || |-. ,-| |,-' '-. ,---.,-' '-.
' .-. || .-. '' .-. |'-. .-'| .--''-. .-'
\ `-' || `-' |\ `-' | | | \ `--. | |
`---' `---' `---' `--' `---' `--'
dbdtct — Web Debug Mode Detection Tool
Created by: Youssef Lahouifi
Supervised by : Redouan Korchiyne
[ Debug Mode Scanner - Test various methods to detect debug mode ]
[*] Starting scan at 2025-04-12 23:01:12
[*] Testing 1 target(s)
[+] Potential Debug Mode Detected on https://target.com
-> Technique: HTTP Method POST
-> Fingerprint: Symfony\Component\
-> Technique: HTTP Method PUT
-> Fingerprint: Symfony\Component\
-> Technique: Malformed JSON ({"foo":"bar")
-> Fingerprint: Symfony\Component\
[*] Scan Summary:
-> Completed in: 7.35 seconds
-> Targets scanned: 1
-> Vulnerable targets: 1
-> Success rate: 100.0%