From a4752a268e9d9f26d02854e9d0037f853b3960f0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=9E=97=E5=AF=92?=
 <57119052+For3stCo1d@users.noreply.github.com>
Date: Tue, 29 Mar 2022 20:59:46 +0800
Subject: [PATCH] Added Apache Ranger template (#4003)

* Add files via upload

* Add files via upload

* Update ranger-default-login.yaml

* misc updates

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
---
 .../apache/ranger-default-login.yaml          | 39 +++++++++++++++++++
 technologies/apache/ranger-detection.yaml     | 29 ++++++++++++++
 2 files changed, 68 insertions(+)
 create mode 100644 default-logins/apache/ranger-default-login.yaml
 create mode 100644 technologies/apache/ranger-detection.yaml

diff --git a/default-logins/apache/ranger-default-login.yaml b/default-logins/apache/ranger-default-login.yaml
new file mode 100644
index 0000000000..b7544ee7da
--- /dev/null
+++ b/default-logins/apache/ranger-default-login.yaml
@@ -0,0 +1,39 @@
+id: ranger-default-login
+
+info:
+  name: Apache Ranger Default Login
+  author: For3stCo1d
+  severity: high
+  reference: https://github.com/apache/ranger
+  metadata:
+    shodan-query: http.title:"Ranger - Sign In"
+  tags: apache,ranger,default-login
+
+requests:
+  - raw:
+      - |
+        POST /login HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+        username={{user}}&password={{pass}}
+
+    attack: pitchfork
+    payloads:
+      user:
+        - admin
+      pass:
+        - admin
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '"statusCode":200'
+          - '"msgDesc":"Login Successful"'
+        condition: and
+
+      - type: status
+        status:
+          - 200
diff --git a/technologies/apache/ranger-detection.yaml b/technologies/apache/ranger-detection.yaml
new file mode 100644
index 0000000000..bc99be67c2
--- /dev/null
+++ b/technologies/apache/ranger-detection.yaml
@@ -0,0 +1,29 @@
+id: ranger-detection
+
+info:
+  name: Apache Ranger Detection
+  author: For3stCo1d
+  severity: info
+  tags: tech,apache,ranger
+  metadata:
+    shodan-query: http.title:"Ranger - Sign In"
+  reference: https://github.com/apache/ranger
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/login.jsp'
+      - "{{BaseURL}}/images/favicon.ico"
+
+    stop-at-first-match: true
+    matchers-condition: or
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "<title> Ranger - Sign In</title>"
+
+      - type: dsl
+        name: favicon
+        dsl:
+          - "status_code==200 && ('1302629996' == mmh3(base64_py(body)))"