--- -- http-default-accounts-fingerprints.lua -- This file contains fingerprint data for http-default-accounts.nse -- -- STRUCTURE: -- * name - Descriptive name -- * category - Category -- * login_combos ---- * username - Default username ---- * password - Default password -- * paths - Paths table containing the possible location of the target -- * login_check - Login function of the target --- local function try_http_basic_login(host, port, path, user, pass) local credentials = {username = user, password = pass} local req = http.get(host, port, path, {no_cache=true, auth=credentials}) if req.status ~= 401 and req.status ~= 403 then return true end return false end fingerprints = {} --- --WEB --- table.insert(fingerprints, { name = "Cacti", category = "web", paths = { {path = "/cacti/"} }, login_combos = { {username = "admin", password = "admin"} }, login_check = function (host, port, path, user, pass) local req = http.post(host, port, path.."index.php", {no_cache=true}, nil, {action="login", login_username=user, login_password=pass}) if not(http.response_contains(req, 'Invalid User Name/Password')) then return true end return false end }) table.insert(fingerprints, { name = "Apache Tomcat", category = "web", paths = { {path = "/manager/html/"}, {path = "/tomcat/manager/html/"} }, login_combos = { {username = "tomcat", password = "tomcat"}, {username = "admin", password = "admin"} }, login_check = function (host, port, path, user, pass) return try_http_basic_login(host, port, path, user, pass) end }) --- --ROUTERS ---