diff --git a/http/default-logins/datagerry/datagerry-default-login.yaml b/http/default-logins/datagerry/datagerry-default-login.yaml new file mode 100644 index 00000000000..e6936df9851 --- /dev/null +++ b/http/default-logins/datagerry/datagerry-default-login.yaml @@ -0,0 +1,45 @@ +id: datagerry-default-login + +info: + name: Datagerry - Default Login + author: gy741 + severity: high + description: | + Datagerry was using default username and password was discovered. + metadata: + verified: true + max-request: 1 + shodan-query: http.title:"datagerry" + tags: datagerry,default-login + +variables: + username: "admin" + password: "admin" + +http: + - raw: + - | + POST /rest/auth/login HTTP/1.1 + Host: {{Hostname}} + Content-Type: application/json + + {"user_name":"{{username}}","password":"{{password}}"} + + matchers-condition: and + matchers: + - type: word + part: body + words: + - '"token":' + - '"token_issued_at":' + - '"token_expire":' + condition: and + + - type: word + part: content_type + words: + - "application/json" + + - type: status + status: + - 200