Merge pull request #7164 from barthy-koeln/umami_default_login

Create umami-default-login.yaml

http/default-logins/umami/umami-default-login.yaml

@@ -0,0 +1,49 @@
+id: umami-default-login
+
+info:
+  name: Umami Default Login
+  author: barthy.koeln
+  severity: high
+  description: |
+    Umami default admin credentials were discovered.
+  reference:
+    - https://umami.is/docs/login
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
+    cvss-score: 8.3
+    cwe-id: CWE-522
+  tags: umami,default-login
+
+http:
+  - raw:
+      - |
+        POST /api/auth/login HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/json; charset=utf-8
+
+        {"username":"{{username}}","password":"{{password}}"}
+
+    attack: pitchfork
+    payloads:
+      username:
+        - admin
+      password:
+        - umami
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '"token":'
+          - '"username":'
+        condition: and
+
+      - type: word
+        part: header
+        words:
+          - "application/json"
+
+      - type: status
+        status:
+          - 200