Create kettle-default-login.yaml

2022-07-19 22:03:30 +08:00 · 2022-07-19 22:03:30 +08:00 · b91fbd758c
parent 1a647cd55d
commit b91fbd758c
1 changed files with 32 additions and 0 deletions
--- a/default-logins/kettle/kettle-default-login.yaml
+++ b/default-logins/kettle/kettle-default-login.yaml
@ -0,0 +1,32 @@
+id: kettle-default-login
+
+info:
+  name: Kettle Default Login
+  author: For3stCo1d
+  severity: medium
+  tags: kettle,default-login
+
+requests:
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+        Authorization: Basic {{base64(username + ':' + password)}}
+
+    attack: pitchfork
+    payloads:
+      username:
+        - cluster
+      password:
+        - cluster
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '<TITLE>Kettle slave server</TITLE>'
+
+      - type: status
+        status:
+          - 200