Merge pull request #1933 from gy741/rule-add-v20

Create ricoh-weak-password.yaml
patch-1
Sandeep Singh 2021-07-17 22:09:45 +05:30 committed by GitHub
commit 8b43c24a51
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 28 additions and 0 deletions

View File

@ -0,0 +1,28 @@
id: ricoh-weak-password
info:
name: Ricoh Weak Password
author: gy741
severity: high
tags: ricoh,default-login
reference: https://ricoh-printer.co/default-username-and-password-for-ricoh-web-image-monitor/
requests:
- raw:
- |
POST /web/guest/tw/websys/webArch/login.cgi HTTP/1.1
Host: {{Hostname}}
Cookie: cookieOnOffChecker=on;
wimToken=&userid_work=&userid=YWRtaW4%3D&password_work=&password=&open=
matchers-condition: and
matchers:
- type: regex
regex:
- 'wimsesid=[0-9]+'
part: header
- type: status
status:
- 302