Files
Sn1per/templates/active/RabbitMQ_Management_Default_Credentials.sh
@xer0dayz 0463dbf29e * v8.7 - Updated web file bruteforce lists
* v8.7 - Added updated Slack API integration/notifications
* v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers
2020-09-14 08:54:19 -07:00

9 lines
308 B
Bash

AUTHOR='@xer0dayz'
VULN_NAME='RabbitMQ Management Default Credentials'
URI="/api/whoami"
METHOD='GET'
MATCH="{\"name\":\"guest\""
SEVERITY='P2 - HIGH'
CURL_OPTS='-H "Content-Type: application/json" -H "Authorization: Z3Vlc3Q6Z3Vlc3Q=" --user-agent '' -s -L --insecure'
SECONDARY_COMMANDS=''
GREP_OPTIONS='-i'