Create IBM-Default-Creds.yaml

patch-1
SaN ThosH 2021-06-26 13:42:00 +05:30 committed by GitHub
parent afacc21204
commit 00b2d39c40
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 34 additions and 0 deletions

View File

@ -0,0 +1,34 @@
id: IBM-Default-Creds
info:
name: IBM Storage Management default creds
author: madrobot
severity: medium
requests:
- raw:
- |
POST /0/Authenticate HTTP/1.1
Host: {{Hostname}}
Origin: http://{{Hostname}}
Content-Length: 62
Content-Type: application/x-www-form-urlencoded
Connection: close
j_username=admin&j_password=admin&continue=&submit=submit+form
matchers-condition: and
matchers:
- type: word
words:
- "/0/Console"
- "Property of IBM"
condition: and
part: body
- type: word
words:
- "JSESSIONID"
part: header
- type: status
status:
- 200