Merge pull request #861 from pikpikcu/patch-62

Create nps-default-password
patch-1
PD-Team 2021-02-14 20:47:40 +05:30 committed by GitHub
commit 90236df4d1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 33 additions and 0 deletions

View File

@ -0,0 +1,33 @@
id: nps-default-password
info:
name: NPS Default Password
author: pikpikcu
severity: high
tags: nps,dlogin
requests:
- method: POST
path:
- "{{BaseURL}}/login/verify"
body: "username=admin&password=123"
headers:
Content-Type: application/x-www-form-urlencoded
Referer: "{{Hostname}}/login/index"
matchers-condition: and
matchers:
- type: word
words:
- "application/json"
part: header
condition: and
- type: word
words:
- '"msg": "login success"'
- '"status": 1'
part: body
condition: and
- type: status
status:
- 200