diff --git a/default-logins/nagios/nagios-default-creds.yaml b/default-logins/nagios/nagios-default-creds.yaml new file mode 100644 index 0000000000..07c746c84a --- /dev/null +++ b/default-logins/nagios/nagios-default-creds.yaml @@ -0,0 +1,29 @@ + +id: Nagios-default-credentials + +info: + name: Nagios Default Password + author: "@iamthefrogy" + severity: high + tags: nagios + +# Nagios Core formerly known as Nagios, is a free and open-source computer-software application that monitors systems, networks and infrastructure. Nagios offers monitoring and alerting services for servers, switches, applications and services. It alerts users when things go wrong and alerts them a second time when the problem has been resolved. +# An attacker can gain a lot of information about the infra from looking at the server status and logs. + +requests: + - method: GET + path: + - "{{BaseURL}}/nagios/side.php" + headers: + Authorization: Basic bmFnaW9zYWRtaW46bmFnaW9zYWRtaW4= + + matchers-condition: and + matchers: + - type: status + status: + - 200 + - type: word + words: + - 'Current Status' + - 'Reports' + condition: and