Merge pull request #10816 from projectdiscovery/tplink-wR940n-default-login

Create tplink-wR940n-default-login.yaml
patch-12
Dhiyaneshwaran 2024-09-24 03:30:44 +05:30 committed by GitHub
commit 9addde84c5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 43 additions and 0 deletions

View File

@ -0,0 +1,43 @@
id: tplink-wR940n-default-login
info:
name: TP-Link Wireless N Router WR940N - Default-Login
author: ritikchaddha
severity: high
metadata:
verified: true
max-request: 1
shodan-query: html:"/userRpm/"
tags: tplink,wR940n,default-login,misconfig
variables:
username: "admin"
password: "admin"
en_pass: "{{md5(password)}}"
cookie: "{{base64(username + ':' + en_pass)}}"
http:
- raw:
- |
GET /userRpm/LoginRpm.htm?Save=Save HTTP/1.1
Host: {{Hostname}}
Cookie: JS=true; Authorization=Basic {{cookie}}
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- 'location\.href(.*)\/([A-Z]+)\/userRpm\/Index\.htm";'
- type: word
part: header
words:
- text/html
- type: status
part: header
status:
- 200