deluge-default-login: Deluge - Default Login

id: deluge-default-login

info:
  name: Deluge - Default Login
  author: ritikchaddha
  severity: high
  description: |
    Deluge Default login credentials were discovered.
  reference:
    - https://docs.linuxserver.io/images/docker-deluge/#:~:text=The%20admin%20interface%20is%20available,%2D%3EInterface%2D%3EPassword.
  metadata:
    max-request: 1
    verified: true
    shodan-query: title:"Deluge"
  tags: deluge,default-login,vuln

http:
  - raw:
      - |
        POST /json HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/json

        {"method":"auth.login","params":["{{password}}"],"id":51}

    payloads:
      password:
        - deluge

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'result": true'
          - 'error": null'
          - 'id": 51'
        condition: and

      - type: word
        part: header
        words:
          - "_session_id="
          - "application/json"
        condition: and

      - type: status
        status:
          - 200
# digest: 490a0046304402201a11570d08f28e1bd4ffe627d44507008450e53c2612248bb23d60ed3fcf254102206101409f6fe65896dfe87b3a015b6a4253ffabac8a60d4e16fd9a5bacefc2640:922c64590222798bb761d5b6d8e72950