asus-rtn16-default-login: ASUS RT-N16 - Default Login

id: asus-rtn16-default-login

info:
  name: ASUS RT-N16 - Default Login
  author: ritikchaddha
  severity: high
  description: |
    ASUS RT-N16 contains a default login vulnerability. Default admin login password 'admin' was found.
  classification:
    cpe: cpe:2.3:h:asus:rt-n16:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: asus
    product: rt-n16
    shodan-query: "RT-N16"
  tags: default-login,asus,rt-n16,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/"
    headers:
      Authorization: "Basic {{base64(username + ':' + password)}}"

    attack: pitchfork
    payloads:
      username:
        - admin
      password:
        - admin

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'ASUS'
          - 'RT-N16'
          - 'System Status'
          - 'Network Map'
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a004730450220759483c20aa388ab19b30fee9912b8d6dfd67c085fa61abe37c95221154cf486022100bbb3c6afa1d49c652ed053f940bfd2dac006c8dfc092588e988d90c815240b90:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.