Merge pull request #4321 from ritikchaddha/patch-45

Create panabit-ixcache-default-login.yaml
patch-1
Prince Chaddha 2022-05-09 14:33:14 +05:30 committed by GitHub
commit 96d0a9a3c8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 36 additions and 0 deletions

View File

@ -0,0 +1,36 @@
id: panabit-ixcache-default-login
info:
name: Panabit iXCache Default Login
author: ritikchaddha
severity: high
reference:
- http://forum.panabit.com/thread-10830-1-1.html
tags: ixcache,default-login,panabit
requests:
- raw:
- |
POST /login/userverify.cgi HTTP/1.1
Host: {{Hostname}}
username={{username}}&password={{password}}
payloads:
username:
- admin
password:
- ixcache
attack: pitchfork
matchers-condition: and
matchers:
- type: word
part: body
words:
- "URL=/cgi-bin/monitor.cgi"
- type: status
status:
- 200