Merge pull request #10794 from projectdiscovery/canon-c3325-default-login

Create canon-c3325-default-login.yaml
patch-12
Dhiyaneshwaran 2024-09-21 19:47:47 +05:30 committed by GitHub
commit 846a60e2f8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 41 additions and 0 deletions

View File

@ -0,0 +1,41 @@
id: canon-c3325-default-login
info:
name: Canon R-ADV C3325 - Default-Login
author: ritikchaddha
severity: high
reference:
- https://oip.manual.canon/USRMA-0618-zz-CS-enLN/contents/1T0002902253.html#:~:text=The%20default%20user%20name%20for,in%20order%20to%20increase%20security.
metadata:
verified: true
max-request: 1
shodan-query: title:"c3325"
tags: canon,c3325,default-login,misconfig
variables:
username: "Administrator"
password: "7654321"
http:
- raw:
- |
POST /login HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
uri=%2F&user_type_generic=true&deptid={{username}}&password={{password}}
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- "writeln('Log Out"
- "Remote UI : Portal"
condition: and
- type: status
status:
- 200