mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-01-31 07:43:27 +08:00
Merge pull request #15078 from Bretss/default_administrator_creds_gude_2301_2302
Added default creds checking nuclei template for gude 2301 and 2302
This commit is contained in:
33
default-logins/gude/gude-default-login.yaml
Normal file
33
default-logins/gude/gude-default-login.yaml
Normal file
@@ -0,0 +1,33 @@
|
||||
id: gude-default-login
|
||||
|
||||
info:
|
||||
name: GUDE - Default Login
|
||||
author: Bretss
|
||||
severity: high
|
||||
description: GUDE 2301 and 2302 default administrator login credentials (admin:admin) were detected.
|
||||
reference:
|
||||
- https://media.distrelec.com/Web/Downloads/_m/an/Gude_2302-1_ger_man.pdf
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
|
||||
cvss-score: 8.3
|
||||
cwe-id: CWE-522
|
||||
metadata:
|
||||
max-request: 1
|
||||
shodan-query: http.html:"Expert Net Control"
|
||||
fofa-query: body="Expert Net Control"
|
||||
tags: gude,default-login
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/ov.html?"
|
||||
|
||||
headers:
|
||||
Authorization: "Basic YWRtaW46YWRtaW4="
|
||||
|
||||
matchers:
|
||||
- type: dsl
|
||||
dsl:
|
||||
- 'contains(body, "Control Panel")'
|
||||
- 'status_code == 200'
|
||||
condition: and
|
||||
Reference in New Issue
Block a user