Merge pull request #10754 from projectdiscovery/nginx-proxy-manager-default-login

Create nginx-proxy-manager-default-login.yaml
patch-11
Ritik Chaddha 2024-09-17 07:12:08 +04:00 committed by GitHub
commit e259c68df1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 30 additions and 0 deletions

View File

@ -0,0 +1,30 @@
id: nginx-proxy-manager-default-login
info:
name: Nginx Proxy Manager - Default Login
author: barttran2000
severity: high
description: |
Default Nginx Proxy Manager credentials was discovered.
metadata:
shodan-query: html:"Nginx Proxy Manager"
verified: true
max-request: 1
tags: nginx,proxy-manager,default-login
http:
- raw:
- |
POST /api/tokens HTTP/1.1
Host: {{Hostname}}
Content-Type: application/json
{"identity": "admin@example.com","secret": "changeme"}
matchers:
- type: dsl
dsl:
- contains_all(body, "{\"token", "expires\":")
- contains(content_type, "application/json")
- status_code == 200
condition: and