Delete http/default-logins/minio/minio-object-default-login.yaml
parent
e124478db2
commit
314f17d88b
|
@ -1,55 +0,0 @@
|
|||
id: minio-object-default-login
|
||||
|
||||
info:
|
||||
name: MinIO Console Object Store - Default Login
|
||||
author: johnk3r
|
||||
severity: high
|
||||
description: |
|
||||
MinIO Console Object Store admin credentials were discovered.
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
|
||||
cvss-score: 8.3
|
||||
cwe-id: CWE-522
|
||||
cpe: cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*
|
||||
metadata:
|
||||
verified: true
|
||||
max-request: 2
|
||||
shodan-query: title:"MinIO Console"
|
||||
product: minio
|
||||
vendor: minio
|
||||
tags: minio,default-login,object-store
|
||||
|
||||
variables:
|
||||
username: minioadmin
|
||||
password: minioadmin
|
||||
|
||||
http:
|
||||
- raw:
|
||||
- |
|
||||
POST /api/v1/login HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
Content-Type: application/json
|
||||
|
||||
{"accessKey":"{{username}}","secretKey":"{{password}}"}
|
||||
|
||||
- |
|
||||
GET /api/v1/session HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- '"serverEndPoint":'
|
||||
- '"ok"'
|
||||
condition: and
|
||||
|
||||
- type: word
|
||||
part: content_type
|
||||
words:
|
||||
- 'application/json'
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
Loading…
Reference in New Issue