Deleting other files

patch-10
foggy-g 2024-07-31 22:26:54 -07:00
parent d9296b000c
commit f1f13cd3e6
1 changed files with 0 additions and 43 deletions

View File

@ -1,43 +0,0 @@
id: couch-db-weak-credentials
info:
name: CouchDB Weak Credential Discovery
author: thefoggiest
severity: high
description: CouchDB weak admin credentials were discovered
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
cvss-score: 8.3
cwe-id: CWE-522
tags: default-login,couchdb,weak-credentials
metadata:
max-request: 3
http:
- raw:
- |-
POST /_session HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
name={{username}}&password={{password}}
payloads:
username:
- admin
- administrator
- couchdb
- root
password:
- admin
- test
- password
- couchdb
attack: clusterbomb
matchers-condition: and
matchers:
- type: status
status:
- 200