Merge pull request #1320 from davidmckennirey/trillthic-viewpoint-default-login

Trillthic viewpoint default login
patch-1
Sandeep Singh 2021-04-21 19:59:17 +05:30 committed by GitHub
commit 4dba36dce6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 33 additions and 0 deletions

View File

@ -0,0 +1,33 @@
id: trilithic-viewpoint-default
info:
name: Trilithic Viewpoint Default Credentials
author: davidmckennirey
severity: high
description: |
Searches for default admin credentials for the (discontinued) Trilithic Viewpoint application.
tags: default-login,trilithic,viewpoint
requests:
- raw:
- |
POST /ViewPoint/admin/Site/ViewPointLogin HTTP/1.1
Host: {{Hostname}}
Content-Length: 65
Content-Type: application/json
Cookie: trilithic_win_auth=false
{u:"admin", t:"undefined", p:"trilithic", d:"", r:false, w:false}
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- '"authorized":true'
- 'redirectUrl'
part: body
condition: and