Skip to content

Updated output from http-default-accounts #604

Closed

Description

@nnposter

An updated version of the script provides the following:

  • Added XML structured output. Example:
<table key="Cacti">
  <elem key="path">/</elem>
  <table key="credentials">
    <table>
      <elem key="username">admin</elem>
      <elem key="password">admin</elem>
    </table>
  </table>
</table>
<table key="Nagios">
  <elem key="path">/nagios/</elem>
  <table key="credentials">
    <table>
      <elem key="username">nagiosadmin</elem>
      <elem key="password">CactiEZ</elem>
    </table>
  </table>
</table>
  • Changed the classic output to be more structured.

Before:

PORT   STATE SERVICE
80/tcp open  http
| http-default-accounts: [Cacti] credentials found -> admin:admin Path:/
|_[Nagios] credentials found -> nagiosadmin:CactiEZ Path:/nagios/

After:

PORT   STATE SERVICE
80/tcp open  http
| http-default-accounts:
|   [Cacti] at /
|     admin:admin
|   [Nagios] at /nagios/
|_    nagiosadmin:CactiEZ
  • Changed the classic output reporting of blank usernames or passwords from "" to more standardized "<blank>" for better clarity. The XML output is not effected.

Before:

PORT   STATE SERVICE
80/tcp open  http
|_http-default-accounts: [Belkin G Wireless Router] credentials found -> : Path:/

After:

PORT   STATE SERVICE
80/tcp open  http
| http-default-accounts:
|   [Belkin G Wireless Router] at /
|_    <blank>:<blank>

@cldrn FYI. Please let me know if you have concerns over any of these changes.

Activity

  1. added a commit that references this issue on Jan 31, 2017
    74a89e4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions