nuclei-templates/security-misconfiguration/rabbitmq-default-admin.yaml

28 lines
556 B
YAML
Raw Normal View History

id: rabbitmq-default-admin
info:
name: RabbitMQ Default Credentials
author: fyoorer & dwisiswant0
severity: High
requests:
- method: GET
path:
- "{{BaseURL}}/api/whoami"
- "{{BaseURL}}:15672/api/whoami"
headers:
Authorization: "Basic Z3Vlc3Q6Z3Vlc3Q="
matchers-condition: and
matchers:
- type: word
words:
- "application/json"
part: header
2020-07-08 17:34:45 +00:00
- type: word
words:
- "{\"name\":\"guest\""
2020-07-08 16:50:39 +00:00
part: body
- type: status
status:
2020-07-08 17:34:45 +00:00
- 200