Create jupyterhub-default-login.yaml (#4006)

* Create jupyterhub-default-login.yaml * Update jupyterhub-default-login.yaml * Update jupyterhub-default-login.yaml * misc updates Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-03-30 01:04:54 +08:00 · 2022-03-30 01:04:54 +08:00 · 47b2eaac1d
parent 09a357535d
commit 47b2eaac1d
1 changed files with 40 additions and 0 deletions
--- a/default-logins/jupyterhub/jupyterhub-default-login.yaml
+++ b/default-logins/jupyterhub/jupyterhub-default-login.yaml
@ -0,0 +1,40 @@
+id: jupyterhub-default-login
+
+info:
+  name: Jupyterhub Default Login
+  author: For3stCo1d
+  severity: high
+  reference: https://github.com/jupyterhub/jupyterhub
+  metadata:
+    shodan-query: http.title:"JupyterHub"
+  tags: jupyterhub,default-login
+
+requests:
+  - raw:
+      - |
+        POST /hub/login?next= HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+        username={{user}}&password={{pass}}
+
+    attack: pitchfork
+    payloads:
+      user:
+        - admin
+        - jovyan
+      pass:
+        - admin
+        - jupyter
+
+    matchers-condition: and
+    matchers:
+      - type: dsl
+        dsl:
+          - contains(tolower(all_headers), 'jupyterhub-session-id=')
+          - contains(tolower(all_headers), 'jupyterhub-hub-login=')
+        condition: and
+
+      - type: status
+        status:
+          - 302