Create umami-default-login.yaml

[barthy-koeln]

Template / PR Information

Closes #7163

Template Validation

I've validated this template locally?

• YES
• NO

[DhiyaneshGeek]

Installed docker using the following command

git clone https://github.com/umami-software/umami.git
cd umami
docker-compose up -d

geekfreak@ % nuclei -u http://localhost:3000 -t test.yaml -vv -debug

                     __     _
   ____  __  _______/ /__  (_)
  / __ \/ / / / ___/ / _ \/ /
 / / / / /_/ / /__/ /  __/ /
/_/ /_/\__,_/\___/_/\___/_/   v2.9.2

		projectdiscovery.io

[INF] Current nuclei version: v2.9.2 (latest)
[INF] Current nuclei-templates version: 9.4.3 (latest)
[INF] New templates added in latest release: 55
[INF] Templates loaded for current scan: 1
[INF] Targets loaded for current scan: 1
[umami-default-login] Umami Default Login (@barthy.koeln) [high]
[INF] [umami-default-login] Dumped HTTP request for http://localhost:3000/api/auth/login

POST /api/auth/login HTTP/1.1
Host: localhost:3000
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36
Connection: close
Content-Length: 39
Content-Type: application/json; charset=utf-8
Accept-Encoding: gzip

{"username":"admin","password":"umami"}
[DBG] [umami-default-login] Dumped HTTP response http://localhost:3000/api/auth/login

HTTP/1.1 200 OK
Connection: close
Content-Length: 479
Content-Security-Policy: default-src 'self'; img-src *; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' api.umami.is; frame-ancestors 'self';
Content-Type: application/json; charset=utf-8
Date: Tue, 02 May 2023 08:52:15 GMT
Etag: "bahev3zoaedb"
Vary: Accept-Encoding
X-Dns-Prefetch-Control: on
X-Frame-Options: SAMEORIGIN

{"token":"WxuI/XjcE0gYlOCICQTSD/+vpa5+D8hXDeDsfZbwH+g1yCFGwcTG97HBCBnPnf2BRER2QOa0uBe2hdoq8ez1n25TBKQIbxmWhz3M8eWKuS0A3k6eMkTdwaAqkx8/BTC6m93yywCbGVtms4Ecb7zhFSyb5BWp9L4BbU5D8d8cd2RPzYN1fPSgwhxNqthJu0vdNM7jfzZlnSkdneh/vLGGLe0CFqROcQBnxKKC3IXt5Yep0f0+dTMqV0zu5qmD4NdkYt3TAERbytpM6LPAXgZ6zqrpf4VwtBXISyKD3M1/6OuMqfCCo0RXJkip4HNjCHALnZQLwABy0y59+mtfUzWsNHrIXnQWUK28BQ==","user":{"id":"41e2b680-648e-4b09-bcd7-3e2b10c06264","username":"admin","createdAt":"2023-05-02T08:45:51.393Z"}}
[umami-default-login:word-1] [http] [high] http://localhost:3000/api/auth/login [password="umami",username="admin"]
[umami-default-login:word-2] [http] [high] http://localhost:3000/api/auth/login [username="admin",password="umami"]
[umami-default-login:status-3] [http] [high] http://localhost:3000/api/auth/login [username="admin",password="umami"]

[pussycat0x]

Hi @barthy-koeln Thank you for sharing this template with the community and for your contribution to this project. Your efforts are greatly appreciated. Cheers! 🚀