Create nps-default-password.yaml

patch-1
PikPikcU 2021-02-14 13:54:14 +00:00 committed by GitHub
parent 30cd623537
commit 536df71d34
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 32 additions and 0 deletions

View File

@ -0,0 +1,32 @@
id: nps-default-password
info:
name: NPS Default Password
author: pikpikcu
severity: high
tags: nps,dlogin
requests:
- method: POST
path:
- "{{BaseURL}}/login/verify"
body: "username=admin&password=123"
headers:
Content-Type: application/x-www-form-urlencoded
Referer: "{{Hostname}}/login/index"
matchers-condition: and
matchers:
- type: word
words:
- "application/json"
part: header
condition: and
- type: word
words:
- "login success"
part: body
condition: and
- type: status
status:
- 200