id: asus-wl520GU-default-login

info:
  name: ASUS WL-520GU - Default Login
  author: ritikchaddha
  severity: high
  description: |
   ASUS WL-520GU contains a default login vulnerability. The default admin login password 'admin' was found.
  metadata:
    max-request: 1
    shodan-query: "WL-520GU"
    verified: true
  tags: default-login,asus,wl-520gu

http:
  - raw:
      - |
        GET / HTTP/1.1
        Host: {{Hostname}}
        Authorization: Basic {{base64(username + ':' + password)}}

    attack: pitchfork
    payloads:
      username:
        - admin
      password:
        - admin

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'ASUS'
          - 'WL-520GU'
          - "return 'Connected"
        condition: and

      - type: status
        status:
          - 200
# digest: 490a00463044022017c5ae1ae8978c04a3cb2dc914cbbfec2fb928e5f41a2a47fd176bfca251208a02203e93dc759abb343620866936cfc3cad973727bab49420ad7e0781524ca285cbf:922c64590222798bb761d5b6d8e72950