diff --git a/http/default-logins/minio/minio-object-default-login.yaml b/http/default-logins/minio/minio-object-default-login.yaml deleted file mode 100644 index b97edb4c23..0000000000 --- a/http/default-logins/minio/minio-object-default-login.yaml +++ /dev/null @@ -1,55 +0,0 @@ -id: minio-object-default-login - -info: - name: MinIO Console Object Store - Default Login - author: johnk3r - severity: high - description: | - MinIO Console Object Store admin credentials were discovered. - classification: - cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - cvss-score: 8.3 - cwe-id: CWE-522 - cpe: cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:* - metadata: - verified: true - max-request: 2 - shodan-query: title:"MinIO Console" - product: minio - vendor: minio - tags: minio,default-login,object-store - -variables: - username: minioadmin - password: minioadmin - -http: - - raw: - - | - POST /api/v1/login HTTP/1.1 - Host: {{Hostname}} - Content-Type: application/json - - {"accessKey":"{{username}}","secretKey":"{{password}}"} - - - | - GET /api/v1/session HTTP/1.1 - Host: {{Hostname}} - - matchers-condition: and - matchers: - - type: word - part: body - words: - - '"serverEndPoint":' - - '"ok"' - condition: and - - - type: word - part: content_type - words: - - 'application/json' - - - type: status - status: - - 200