Merge pull request #10795 from projectdiscovery/tplink-r470t-default-login

Create tplink-r470t-default-login.yaml
2024-09-21 18:48:29 +05:30 · 2024-09-21 18:48:29 +05:30 · 73defd0753
parent 1becf1f6ff 3ce27fd055
commit 73defd0753
1 changed files with 41 additions and 0 deletions
--- a/http/default-logins/tplink/tplink-r470t-default-login.yaml
+++ b/http/default-logins/tplink/tplink-r470t-default-login.yaml
@ -0,0 +1,41 @@
+id: tplink-r470t-default-login
+
+info:
+  name: TP-LINK Router R470T - Default-Login
+  author: ritikchaddha
+  severity: high
+  reference:
+    - http://cdn.cnetcontent.com/73/f6/73f6abc0-ef95-48d8-a55f-5ea3f5816332.pdf
+  metadata:
+    verified: true
+    max-request: 1
+    shodan-query: "r470t"
+  tags: tp-link,r470t,default-login,misconfig
+
+variables:
+  username: "admin"
+  password: "admin"
+
+http:
+  - raw:
+      - |
+        @timeout: 20s
+        GET /userRpm/MenuRpm.htm HTTP/1.1
+        Host: {{Hostname}}
+        Authorization: Basic {{base64(username + ':' + password)}}
+
+    host-redirects: true
+    max-redirects: 2
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: response
+        words:
+          - "SystemStatisticRpm"
+          - "DiagnosticRpm"
+          - "R470T"
+        condition: and
+
+      - type: status
+        status:
+          - 200