Merge pull request #10331 from projectdiscovery/deluge-default-login

Create deluge-default-login.yaml
main
Dhiyaneshwaran 2024-07-18 19:22:16 +05:30 committed by GitHub
commit b4981f5727
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 49 additions and 0 deletions

View File

@ -0,0 +1,49 @@
id: deluge-default-login
info:
name: Deluge - Default Login
author: ritikchaddha
severity: high
description: |
Deluge Default login credentials were discovered.
reference:
- https://docs.linuxserver.io/images/docker-deluge/#:~:text=The%20admin%20interface%20is%20available,%2D%3EInterface%2D%3EPassword.
metadata:
max-request: 1
verified: true
shodan-query: title:"Deluge"
tags: deluge,default-login
http:
- raw:
- |
POST /json HTTP/1.1
Host: {{Hostname}}
Content-Type: application/json
{"method":"auth.login","params":["{{password}}"],"id":51}
payloads:
password:
- deluge
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'result": true'
- 'error": null'
- 'id": 51'
condition: and
- type: word
part: header
words:
- "_session_id="
- "application/json"
condition: and
- type: status
status:
- 200