Merge pull request #3581 from pikpikcu/patch-317

Create mofi4500-default-login
patch-1
Sandeep Singh 2022-01-28 14:29:55 +05:30 committed by GitHub
commit ccb14a8cb5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 33 additions and 0 deletions

View File

@ -0,0 +1,33 @@
id: mofi4500-default-login
info:
name: MOFI4500-4GXeLTE-V2 Default Login
author: pikpikcu
severity: critical
tags: mofi,default-login
requests:
- raw:
- |
POST /cgi-bin/luci/ HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
username=root&password=admin
attack: pitchfork
payloads:
username:
- root
password:
- admin
matchers-condition: and
matchers:
- type: word
words:
- "MOFI4500 - General - LuCI"
- type: status
status:
- 200