diff --git a/default-logins/kafka-center-default-login.yaml b/default-logins/kafka-center-default-login.yaml new file mode 100644 index 0000000000..644b8f35b9 --- /dev/null +++ b/default-logins/kafka-center-default-login.yaml @@ -0,0 +1,38 @@ +id: kafka-center-default-login + +info: + name: Kafka Center Default Login + author: dhiyaneshDK + severity: high + tags: kafka,default-login + metadata: + shodan-query: http.title:"Kafka Center" + +requests: + - raw: + - | + POST /login/system HTTP/1.1 + Host: {{Hostname}} + Content-Type: application/json + + {"name":"{{username}}","password":"{{password}}","checkbox":false} + + attack: pitchfork + payloads: + username: + - admin + password: + - admin + + matchers-condition: and + matchers: + + - type: word + words: + - '"code":200' + - '"name":"admin"' + condition: and + + - type: status + status: + - 200 diff --git a/exposed-panels/kafka-center-login.yaml b/exposed-panels/kafka-center-login.yaml new file mode 100644 index 0000000000..439928cda2 --- /dev/null +++ b/exposed-panels/kafka-center-login.yaml @@ -0,0 +1,21 @@ +id: kafka-center-login + +info: + name: Kafka Center Login + author: dhiyaneshDK + severity: info + tags: panel,kafka + metadata: + shodan-query: http.title:"Kafka Center" + +requests: + - method: GET + path: + - '{{BaseURL}}' + + redirects: true + max-redirects: 2 + matchers: + - type: word + words: + - 'Kafka Center' diff --git a/misconfiguration/kafka-cruise-control.yaml b/misconfiguration/kafka-cruise-control.yaml new file mode 100644 index 0000000000..ef694ffe4c --- /dev/null +++ b/misconfiguration/kafka-cruise-control.yaml @@ -0,0 +1,21 @@ +id: kafka-cruise-control + +info: + name: Kafka Cruise Control UI + author: dhiyaneshDK + severity: medium + tags: kafka,misconfig + metadata: + shodan-query: http.title:"Kafka Cruise Control UI" + +requests: + - method: GET + path: + - '{{BaseURL}}' + + redirects: true + max-redirects: 2 + matchers: + - type: word + words: + - 'Kafka Cruise Control UI'