Merge pull request #4054 from ritikchaddha/patch-4

Create secnet-ac-default-login.yaml

default-logins/secnet-ac-default-login.yaml

@@ -0,0 +1,42 @@
+id: secnet-ac-default-password
+
+info:
+  name: secnet-ac-default-password
+  author: ritikchaddha
+  severity: high
+  description: secnet ac default admin credentials were discovered.
+  reference:
+    - https://bbs.secnet.cn/post/t-30
+  tags: secnet,default-login
+
+requests:
+  - raw:
+      - |
+        POST /login.cgi HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+        user={{username}}&password={{password}}
+
+    attack: pitchfork
+    payloads:
+      username:
+        - admin
+      password:
+        - admin
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "window.open('index.htm"
+
+      - type: word
+        part: header
+        words:
+          - "ac_userid={{username}},ac_passwd="
+
+      - type: status
+        status:
+          - 200

exposed-panels/secnet-ac-panel.yaml

@@ -0,0 +1,23 @@
+id: secnet-ac-panel
+
+info:
+  name: Secnet ac Panel Detect
+  author: ritikchaddha
+  severity: info
+  tags: secnet-ac,panel
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/login.html"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "<title>安网科技-智能路由系统</title>"
+
+      - type: status
+        status:
+          - 200