id: tplink-r470t-default-login
info:
name: TP-LINK Router R470T - Default-Login
author: ritikchaddha
severity: high
reference:
- http://cdn.cnetcontent.com/73/f6/73f6abc0-ef95-48d8-a55f-5ea3f5816332.pdf
metadata:
verified: true
max-request: 1
shodan-query: "r470t"
tags: tp-link,r470t,default-login,misconfig,vuln
variables:
username: "admin"
password: "admin"
http:
- raw:
- |
@timeout: 20s
GET /userRpm/MenuRpm.htm HTTP/1.1
Host: {{Hostname}}
Authorization: Basic {{base64(username + ':' + password)}}
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: response
words:
- "SystemStatisticRpm"
- "DiagnosticRpm"
- "R470T"
condition: and
- type: status
status:
- 200
# digest: 490a004630440220296fa83beb9568920adfa03885276e52a8eab6b47eb988844b4edef6b64fa59102205a455c1d864ce149982eb970391bf07a6aab4308bd842978255dc74efbe4d97c:922c64590222798bb761d5b6d8e72950