Create jupyterhub-default-login.yaml (#4006)

* Create jupyterhub-default-login.yaml

* Update jupyterhub-default-login.yaml

* Update jupyterhub-default-login.yaml

* misc updates

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
patch-1
林寒 2022-03-30 01:04:54 +08:00 committed by GitHub
parent 09a357535d
commit 47b2eaac1d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 40 additions and 0 deletions

View File

@ -0,0 +1,40 @@
id: jupyterhub-default-login
info:
name: Jupyterhub Default Login
author: For3stCo1d
severity: high
reference: https://github.com/jupyterhub/jupyterhub
metadata:
shodan-query: http.title:"JupyterHub"
tags: jupyterhub,default-login
requests:
- raw:
- |
POST /hub/login?next= HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
username={{user}}&password={{pass}}
attack: pitchfork
payloads:
user:
- admin
- jovyan
pass:
- admin
- jupyter
matchers-condition: and
matchers:
- type: dsl
dsl:
- contains(tolower(all_headers), 'jupyterhub-session-id=')
- contains(tolower(all_headers), 'jupyterhub-hub-login=')
condition: and
- type: status
status:
- 302