id: tplink-r470t-default-login

info:
  name: TP-LINK Router R470T - Default-Login
  author: ritikchaddha
  severity: high
  reference:
    - http://cdn.cnetcontent.com/73/f6/73f6abc0-ef95-48d8-a55f-5ea3f5816332.pdf
  metadata:
    verified: true
    max-request: 1
    shodan-query: "r470t"
  tags: tp-link,r470t,default-login,misconfig,vuln

variables:
  username: "admin"
  password: "admin"

http:
  - raw:
      - |
        @timeout: 20s
        GET /userRpm/MenuRpm.htm HTTP/1.1
        Host: {{Hostname}}
        Authorization: Basic {{base64(username + ':' + password)}}

    host-redirects: true
    max-redirects: 2
    matchers-condition: and
    matchers:
      - type: word
        part: response
        words:
          - "SystemStatisticRpm"
          - "DiagnosticRpm"
          - "R470T"
        condition: and

      - type: status
        status:
          - 200
# digest: 490a004630440220296fa83beb9568920adfa03885276e52a8eab6b47eb988844b4edef6b64fa59102205a455c1d864ce149982eb970391bf07a6aab4308bd842978255dc74efbe4d97c:922c64590222798bb761d5b6d8e72950