diff --git a/http/default-logins/mantisbt/mantisbt-anonymous-login.yaml b/http/default-logins/mantisbt/mantisbt-anonymous-login.yaml new file mode 100644 index 0000000000..d8b07d134a --- /dev/null +++ b/http/default-logins/mantisbt/mantisbt-anonymous-login.yaml @@ -0,0 +1,32 @@ +id: mantisbt-anonymous-login + +info: + name: mantisbt - Anonymous Login + author: pussycat0x + severity: medium + description: | + mantisbt Anonymous login were discovered. + metadata: + verified: true + max-request: 1 + shodan-query: http.favicon.hash:662709064 + tags: default-logins,anonymous,mantisbt,default-login + +http: + - method: GET + path: + - '{{BaseURL}}/my_view_page.php' + + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'user-info">anonymous"' + - 'My View' + - 'Roadmap' + condition: and + + - type: status + status: + - 200