🔨 Fix from false-positive rabbitmq-default-admin results

patch-1
dw1 2020-07-08 23:46:40 +07:00
parent ed4e9e7feb
commit f851f14173
1 changed files with 14 additions and 5 deletions

View File

@ -2,16 +2,25 @@ id: rabbitmq-default-admin
info: info:
name: RabbitMQ Default Credentials name: RabbitMQ Default Credentials
author: fyoorer author: fyoorer & dwisiswant0
severity: High severity: High
requests: requests:
- method: GET - method: GET
headers:
authorization: "Basic Z3Vlc3Q6Z3Vlc3Q="
path: path:
- '{{BaseURL}}/api/whoami' - "{{BaseURL}}/api/whoami"
- "{{BaseURL}}:15672/api/whoami"
headers:
Authorization: "Basic Z3Vlc3Q6Z3Vlc3Q="
matchers-condition: and
matchers: matchers:
- type: word
words:
- "application/json"
part: header
- type:
words:
- "{\"name\":\"guest\""
- type: status - type: status
status: status:
- 200 - 200