diff --git a/default-logins/ibm/IBM-Default-Creds.yaml b/default-logins/ibm/IBM-Default-Creds.yaml new file mode 100644 index 0000000000..3de1643ded --- /dev/null +++ b/default-logins/ibm/IBM-Default-Creds.yaml @@ -0,0 +1,34 @@ +id: IBM-Default-Creds + +info: + name: IBM Storage Management default creds + author: madrobot + severity: medium + +requests: + - raw: + - | + POST /0/Authenticate HTTP/1.1 + Host: {{Hostname}} + Origin: http://{{Hostname}} + Content-Length: 62 + Content-Type: application/x-www-form-urlencoded + Connection: close + + j_username=admin&j_password=admin&continue=&submit=submit+form + + matchers-condition: and + matchers: + - type: word + words: + - "/0/Console" + - "Property of IBM" + condition: and + part: body + - type: word + words: + - "JSESSIONID" + part: header + - type: status + status: + - 200