Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Wazuh default credentials template #9480

Merged
merged 4 commits into from
Apr 8, 2024

Conversation

denandz
Copy link
Contributor

@denandz denandz commented Apr 2, 2024

Template / PR Information

Fixes the Wazuh default credentials template and adds the default password for Docker deployed Wazuh installations.

Closes issue #9479

Template Validation

I've validated this template locally?

  • YES
  • NO

Additional Details (leave it blank if not applicable)

Template working correctly after this fix:

$ nuclei -t http/default-logins/wazuh-default-login.yaml -u https://127.0.0.1 -v

                     __     _
   ____  __  _______/ /__  (_)
  / __ \/ / / / ___/ / _ \/ /
 / / / / /_/ / /__/ /  __/ /
/_/ /_/\__,_/\___/_/\___/_/   v3.2.2

		projectdiscovery.io

[VER] Started metrics server at localhost:9092
[INF] Current nuclei version: v3.2.2 (latest)
[INF] Current nuclei-templates version: v9.8.0 (latest)
[WRN] Scan results upload to cloud is disabled.
[INF] New templates added in latest release: 85
[INF] Templates loaded for current scan: 1
[WRN] Loaded 1 unsigned templates for scan. Use with caution.
[INF] Targets loaded for current scan: 1
[VER] [wazuh-default-login] Sent HTTP request to https://127.0.0.1/app/login
[VER] [wazuh-default-login] Sent HTTP request to https://127.0.0.1/auth/login
[VER] [wazuh-default-login] Sent HTTP request to https://127.0.0.1/auth/login
[VER] [wazuh-default-login] Sent HTTP request to https://127.0.0.1/auth/login
[VER] [wazuh-default-login] Sent HTTP request to https://127.0.0.1/auth/login
[wazuh-default-login] [http] [high] https://127.0.0.1/auth/login [password="SecretPassword",username="admin"]
[VER] [wazuh-default-login] Sent HTTP request to https://127.0.0.1/auth/login
[VER] [wazuh-default-login] Sent HTTP request to https://127.0.0.1/auth/login

Additional References:

@DhiyaneshGeek DhiyaneshGeek added the good first issue Good for newcomers label Apr 2, 2024
@GeorginaReeder
Copy link

Thanks for your contribution @denandz , we appreciate it!

We also have a Discord server that you're welcome to join. It's a great place to connect with fellow contributors and stay updated with the latest developments!

@DhiyaneshGeek
Copy link
Member

Hi @denandz

Thank you so much for updating the template and contributing to the template project.

@DhiyaneshGeek DhiyaneshGeek merged commit 1ae53f6 into projectdiscovery:main Apr 8, 2024
2 checks passed
@DhiyaneshGeek
Copy link
Member

Hi @denandz

You can grab some cool PD Stickers from here http://nux.gg/stickers

Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Done Ready to merge good first issue Good for newcomers
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Wazuh default credentials check does not work due to extractor logic failing
4 participants