Merge pull request #1564 from pikpikcu/patch-163

Create szhe-default-password
patch-1
Sandeep Singh 2021-05-31 11:10:37 +05:30 committed by GitHub
commit b12731c1c7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 33 additions and 0 deletions

View File

@ -0,0 +1,33 @@
id: szhe-default-password
info:
name: Szhe Default Password
author: pikpikcu
severity: low
tags: szhe,default-login
vendor: https://github.com/Cl0udG0d/SZhe_Scan
requests:
- method: POST
path:
- "{{BaseURL}}/login/"
headers:
Content-Type: application/x-www-form-urlencoded
body: |
email=springbird@qq.com&password=springbird&remeber=true
matchers-condition: and
matchers:
- type: word
words:
- 'You should be redirected automatically to target URL: <a href="/">/</a>'
- type: word
words:
- 'Set-Cookie: session'
part: header
- type: status
status:
- 302