minor -changes
parent
9db6299cef
commit
ef81924f10
|
@ -1,15 +1,15 @@
|
|||
id: yealink-default-login
|
||||
|
||||
info:
|
||||
name: Yealink CTP18 Default Login
|
||||
name: Yealink CTP18 Default Login - Detect
|
||||
author: parzival
|
||||
severity: high
|
||||
description: Yealink CTP18 Default Administrator Credentials Discovered.
|
||||
reference:
|
||||
- https://support.yealink.com
|
||||
metadata:
|
||||
max-request: 2
|
||||
verified: true
|
||||
fofa-query: "Yealink CTP18"
|
||||
tags: default-login,yealink
|
||||
|
||||
http:
|
||||
|
@ -20,8 +20,17 @@ http:
|
|||
Content-Type: application/x-www-form-urlencoded
|
||||
Accept: application/json, text/plain, */*
|
||||
|
||||
username=admin&pwd=0000
|
||||
username={{username}}&pwd={{password}}
|
||||
|
||||
attack: pitchfork
|
||||
payloads:
|
||||
username:
|
||||
- admin
|
||||
password:
|
||||
- '0000'
|
||||
|
||||
host-redirects: true
|
||||
cookie-reuse: true
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: status
|
||||
|
@ -37,4 +46,4 @@ http:
|
|||
part: body
|
||||
words:
|
||||
- '{"ret":"ok","data":"ok"}'
|
||||
condition: and
|
||||
condition: and
|
Loading…
Reference in New Issue