Merge pull request #2553 from izn0u/template_vidyo

Added vidyo-super default-creds Template
patch-1
Sandeep Singh 2021-09-04 16:39:42 +05:30 committed by GitHub
commit a79c616a67
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 54 additions and 0 deletions

View File

@ -0,0 +1,54 @@
id: vidyo-default-credentials
info:
name: Vidyo Default Credentials
author: izn0u
severity: medium
description: test for default cred super:password
reference: https://support.vidyocloud.com/hc/en-us/articles/226265128
tags: vidyo,default-login
requests:
- raw:
- |
GET /super/login.html?lang=en HTTP/1.1
Host: {{Hostname}}
Origin: {{BaseURL}}
- |
POST /super/super_security_check;jsessionid={{session}}?csrf_tkn={{csrf_tkn}} HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
Origin: {{BaseURL}}
Referer: {{RootURL}}/super/login.html?lang=en
Cookie: JSESSIONID={{session}} ; VidyoPortalSuperLanguage=en
username=super&password=password
extractors:
- type: regex
name: csrf_tkn
group: 1
part: body
internal: true
regex:
- 'csrf_tkn=([A-Za-z0-9.-]+)'
- type: kval
name: session
internal: true
part: header
kval:
- JSESSIONID
matchers-condition: and
matchers:
- type: word
part: header
words:
- "/super/index.html"
- type: status
status:
- 302