Description

Identifies Azure App Services with remote debugging enabled, which could allow attackers to remotely debug and potentially exploit the application. Remote debugging in production environments exposes sensitive runtime information and could enable attackers to manipulate application behavior.

Detection Strategy

• Checks the remote_debugging_enabled configuration setting for each Azure App Service

• Reports a vulnerability if remote_debugging_enabled is set to true

• Examines all App Services in the subscription for this misconfiguration