diff --git a/http/default-logins/fuji-xerox/fuji-xerox-default-login.yaml b/http/default-logins/fuji-xerox/fuji-xerox-default-login.yaml new file mode 100644 index 00000000000..6b5f4258a13 --- /dev/null +++ b/http/default-logins/fuji-xerox/fuji-xerox-default-login.yaml @@ -0,0 +1,38 @@ +id: fuji-xerox-default-login + +info: + name: Fuji Xerox ApeosPort - Default Login + author: Morgan Robertson + severity: high + description: | + This template checks for the default credentials (username: 11111, password: x-admin) on Fuji Xerox ApeosPort series printers. If the credentials are valid, the response will have a 200 HTTP status code. Tested on a Fuji Xerox ApeosPort-V C2275 T2. + reference: + - https://4it.com.au/kb/article/fuji-xerox-default-password/ + metadata: + max-request: 1 + verified: true + vendor: fuji-xerox + fofa-query: '"prop.htm" && "docucentre"' + tags: default-login,fuji,fuji-xerox,printer + +http: + - raw: + - | + GET /prop.htm HTTP/1.1 + Host: {{Hostname}} + Authorization: Basic MTExMTE6eC1hZG1pbg== + Connection: close + + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Configuration Overview" + - "Description" + - "System Administrator Settings" + condition: and + + - type: status + status: + - 200