Create axis2-default-password.yaml

patch-1
PikPikcU 2021-02-26 20:03:32 +00:00 committed by GitHub
parent 1ba9f0d33d
commit 5776c47894
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 27 additions and 0 deletions

View File

@ -0,0 +1,27 @@
id: axis2-default-password
info:
name: Axis2 Default Password
author: pikpikcu
severity: high
tags: axis,apache,dlogin
requests:
- method: POST
path:
- "{{BaseURL}}/axis2-admin/login"
- "{{BaseURL}}/axis2/axis2-admin/login"
headers:
Content-Type: application/x-www-form-urlencoded
body: "userName=admin&password=axis2&submit=+Login+"
matchers-condition: and
matchers:
- type: word
words:
- "<h1>Welcome to Axis2 Web Admin Module !!</h1>"
- type: status
status:
- 200