Update and rename misconfiguration/aem/aem-felix-console.yaml to default-logins/aem/aem-felix-console.yaml

patch-1
Prince Chaddha 2022-09-26 11:48:56 +05:30 committed by GitHub
parent 3576d9dd9d
commit 5f596e2bd6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 2 deletions

View File

@ -12,7 +12,7 @@ info:
shodan-query:
- http.title:"AEM Sign In"
- http.component:"Adobe Experience Manager"
tags: misconfig,aem,adobe
tags: misconfig,aem,adobe,default-login
requests:
- method: GET
@ -20,7 +20,14 @@ requests:
- "{{BaseURL}}/system/console/bundles"
- "{{BaseURL}}///system///console///bundles"
headers:
Authorization: Basic YWRtaW46YWRtaW4=
Authorization: Basic {{base64(username + ':' + password)}}
attack: pitchfork
payloads:
username:
- admin
password:
- admin
stop-at-first-match: true
matchers-condition: and