Create iptime-router.yaml

Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-06-20 13:10:16 +09:00 · 2021-06-20 13:10:16 +09:00 · 8b94a2b701
parent 1d98d72476
commit 8b94a2b701
1 changed files with 22 additions and 0 deletions
--- a/exposed-panels/iptime-router.yaml
+++ b/exposed-panels/iptime-router.yaml
@ -0,0 +1,22 @@
+id: iptime-router
+
+info:
+  name: ipTIME Router Login
+  author: gy741
+  severity: info
+  reference: http://pierrekim.github.io/blog/2015-07-01-poc-with-RCE-against-127-iptime-router-models.html
+  tags: panel,login
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/sess-bin/login_session.cgi'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'ipTIME'
+      - type: status
+        status:
+          - 200