Merge pull request #10195 from projectdiscovery/pussycat0x-patch-9

Create ruijie-nbr-default-login.yaml

http/default-logins/ruijie/ruijie-nbr-default-login.yaml

@@ -0,0 +1,43 @@
+id: ruijie-nbr-default-login
+
+info:
+  name: Ruijie NBR Series Routers - Default Login
+  author: pussycat0x
+  severity: high
+  description: |
+    Ruijie NBR Series Routers Default Login username and password was discovered.
+  metadata:
+    max-request: 1
+    verified: true
+    fofa-query: body="上层网络出现异常，请检查外网线路或联系ISP运营商协助排查"
+  tags: default-login,ruijie-nbr
+
+http:
+  - raw:
+      - |
+        POST /login.cgi HTTP/1.1
+        Host: {{Hostname}}
+        Origin: {{RootURL}}
+        Content-Type: application/x-www-form-urlencoded
+        Referer: {{RootURL}}/login.html
+
+        user={{username}}&password={{password}}
+
+    stop-at-first-match: true
+    attack: pitchfork
+    payloads:
+      username:
+        - admin
+      password:
+        - admin
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        part: body
+        regex:
+          - 'index\.htm\?_([0-9]+)'
+
+      - type: status
+        status:
+          - 200