id: dell-idrac-default-login

info:
  name: Dell iDRAC6/7/8 Default Login
  author: kophjager007,megamansec
  severity: high
  description: Dell iDRAC6/7/8 default login information was discovered. The default iDRAC username and password are widely known, and any user with access to the server could change the default password.
  reference:
    - https://securityforeveryone.com/tools/dell-idrac6-7-8-default-login-scanner
  classification:
    cwe-id: CWE-798
  metadata:
    max-request: 2
  tags: dell,idrac,default-login

http:
  - raw:
      - |
        POST /data/login HTTP/1.1
        Host: {{Hostname}}

        user={{username}}&password={{password}}

    payloads:
      username:
        - root
      password:
        - calvin
        - root
    attack: clusterbomb

    headers:
      Content-Type: "application/x-www-form-urlencode"
      Referer: "{{BaseURL}}/login.html"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - '<authResult>0</authResult>'

# digest: 490a0046304402202c6fe8dc51215c107b88e0f39f89e1e805ade5be785bbd03afa076226966d71402201607e9365f24af26166dc48f245426b619345fe7948b1fe656a487eef84f3f8a:922c64590222798bb761d5b6d8e72950
