mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-01-31 15:53:33 +08:00
Merge pull request #15078 from Bretss/default_administrator_creds_gude_2301_2302
Added default creds checking nuclei template for gude 2301 and 2302
This commit is contained in:
33
default-logins/gude/gude-default-login.yaml
Normal file
33
default-logins/gude/gude-default-login.yaml
Normal file
@@ -0,0 +1,33 @@
|
|||||||
|
id: gude-default-login
|
||||||
|
|
||||||
|
info:
|
||||||
|
name: GUDE - Default Login
|
||||||
|
author: Bretss
|
||||||
|
severity: high
|
||||||
|
description: GUDE 2301 and 2302 default administrator login credentials (admin:admin) were detected.
|
||||||
|
reference:
|
||||||
|
- https://media.distrelec.com/Web/Downloads/_m/an/Gude_2302-1_ger_man.pdf
|
||||||
|
classification:
|
||||||
|
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
|
||||||
|
cvss-score: 8.3
|
||||||
|
cwe-id: CWE-522
|
||||||
|
metadata:
|
||||||
|
max-request: 1
|
||||||
|
shodan-query: http.html:"Expert Net Control"
|
||||||
|
fofa-query: body="Expert Net Control"
|
||||||
|
tags: gude,default-login
|
||||||
|
|
||||||
|
http:
|
||||||
|
- method: GET
|
||||||
|
path:
|
||||||
|
- "{{BaseURL}}/ov.html?"
|
||||||
|
|
||||||
|
headers:
|
||||||
|
Authorization: "Basic YWRtaW46YWRtaW4="
|
||||||
|
|
||||||
|
matchers:
|
||||||
|
- type: dsl
|
||||||
|
dsl:
|
||||||
|
- 'contains(body, "Control Panel")'
|
||||||
|
- 'status_code == 200'
|
||||||
|
condition: and
|
||||||
Reference in New Issue
Block a user