Added Fuel CMS Templates

patch-1
Adam Crosser 2022-04-11 15:06:04 -05:00
parent cac389c2e4
commit 96704d7fc2
2 changed files with 53 additions and 0 deletions

View File

@ -0,0 +1,30 @@
id: fuelcms-default-login
info:
name: Fuel CMS Default Credentials
author: Adam Crosser
severity: high
tags: fuelcms,default-login
description: Fuel CMS default admin credentials were discovered.
reference: Checks thed
- https://docs.getfuelcms.com/general/security
requests:
- raw:
- |
POST /fuel/login HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
user_name=admin&password=admin&Login=Login
matchers-condition: and
matchers:
- type: status
status:
- 302
- type: word
words:
- "/fuel/dashboard"
part: header

View File

@ -0,0 +1,23 @@
id: fuelcms-detect
info:
name: Fuel CMS Detect
author: Adam Crosser
severity: info
tags: tech,fuelcms
requests:
- method: GET
path:
- "{{BaseURL}}/fuel/login"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "/fuel/modules"
- type: status
status:
- 200