Added Apache Ranger template (#4003)

* Add files via upload

* Add files via upload

* Update ranger-default-login.yaml

* misc updates

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
patch-1
林寒 2022-03-29 20:59:46 +08:00 committed by GitHub
parent 64d302f963
commit a4752a268e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 68 additions and 0 deletions

View File

@ -0,0 +1,39 @@
id: ranger-default-login
info:
name: Apache Ranger Default Login
author: For3stCo1d
severity: high
reference: https://github.com/apache/ranger
metadata:
shodan-query: http.title:"Ranger - Sign In"
tags: apache,ranger,default-login
requests:
- raw:
- |
POST /login HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
username={{user}}&password={{pass}}
attack: pitchfork
payloads:
user:
- admin
pass:
- admin
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"statusCode":200'
- '"msgDesc":"Login Successful"'
condition: and
- type: status
status:
- 200

View File

@ -0,0 +1,29 @@
id: ranger-detection
info:
name: Apache Ranger Detection
author: For3stCo1d
severity: info
tags: tech,apache,ranger
metadata:
shodan-query: http.title:"Ranger - Sign In"
reference: https://github.com/apache/ranger
requests:
- method: GET
path:
- '{{BaseURL}}/login.jsp'
- "{{BaseURL}}/images/favicon.ico"
stop-at-first-match: true
matchers-condition: or
matchers:
- type: word
part: body
words:
- "<title> Ranger - Sign In</title>"
- type: dsl
name: favicon
dsl:
- "status_code==200 && ('1302629996' == mmh3(base64_py(body)))"