Merge pull request #15078 from Bretss/default_administrator_creds_gude_2301_2302

Added default creds checking nuclei template for gude 2301 and 2302
This commit is contained in:
Roberto Nunes
2026-01-30 08:41:15 +09:00
committed by GitHub

View File

@@ -0,0 +1,33 @@
id: gude-default-login
info:
name: GUDE - Default Login
author: Bretss
severity: high
description: GUDE 2301 and 2302 default administrator login credentials (admin:admin) were detected.
reference:
- https://media.distrelec.com/Web/Downloads/_m/an/Gude_2302-1_ger_man.pdf
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
cvss-score: 8.3
cwe-id: CWE-522
metadata:
max-request: 1
shodan-query: http.html:"Expert Net Control"
fofa-query: body="Expert Net Control"
tags: gude,default-login
http:
- method: GET
path:
- "{{BaseURL}}/ov.html?"
headers:
Authorization: "Basic YWRtaW46YWRtaW4="
matchers:
- type: dsl
dsl:
- 'contains(body, "Control Panel")'
- 'status_code == 200'
condition: and