hunt-laravel

What problem does it solve?

Laravel applications frequently contain high-impact, framework-specific vulnerabilities that are often missed during standard security assessments, leading to unpatched risks like remote code execution, account takeover, and sensitive credential theft.

Core Features & Use Cases

• Laravel Fingerprinting: Confirm if a target runs Laravel via session cookies, error pages, and common framework paths.
• Critical Vulnerability Checks: Test for Ignition RCE (CVE-2021-3129), unauthorized Telescope/Horizon dashboard access, .env exposure with APP_KEY leakage, signed URL bypasses, Eloquent mass assignment, and cookie deserialization.
• Use Case: During a penetration test of a PHP web application suspected to use Laravel, use this skill to systematically validate all common Laravel misconfigurations and flaws to identify critical, high-severity findings.

Quick Start

Use the hunt-laravel skill to scan the target domain your-target.com for all common Laravel-specific vulnerabilities including debug mode leakage, dashboard exposure, and mass assignment flaws.