create nagios-default-creds.yaml

default-logins/nagios/nagios-default-creds.yaml

@@ -0,0 +1,29 @@
+
+id: Nagios-default-credentials
+
+info:
+  name: Nagios Default Password
+  author: "@iamthefrogy"
+  severity: high
+  tags: nagios
+
+# Nagios Core formerly known as Nagios, is a free and open-source computer-software application that monitors systems, networks and infrastructure. Nagios offers monitoring and alerting services for servers, switches, applications and services. It alerts users when things go wrong and alerts them a second time when the problem has been resolved.
+# An attacker can gain a lot of information about the infra from looking at the server status and logs.
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/nagios/side.php"
+    headers:
+      Authorization: Basic bmFnaW9zYWRtaW46bmFnaW9zYWRtaW4=
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - 'Current Status'
+          - 'Reports'
+        condition: and