Skip to content

Wildfly - Default Admin Login

ID: wildfly-default-login

Severity: high

Author: s0obi

Tags: wildfly,default-login

Wildfly default admin login credentials were successful.

id: wildfly-default-login
info:
name: Wildfly - Default Admin Login
author: s0obi
severity: high
description: |
Wildfly default admin login credentials were successful.
reference:
- https://docs.wildfly.org/26.1/#administrator-guides
metadata:
max-request: 1
tags: wildfly,default-login
http:
- raw:
- |
GET /management HTTP/1.1
Host: {{Hostname}}
digest-username: admin
digest-password: admin
matchers-condition: and
matchers:
- type: word
part: body
words:
- "management-major-version"
- "product-version"
condition: and
- type: word
part: header
words:
- "application/json"
- type: status
status:
- 200
# digest: 4a0a00473045022047d5ec154a0857ec0883927a388a2898698eb452541e01be8ea2ea2de7b5dbc9022100d04b5259db3d1932f4e168548c2402d957b398e9c2d17d35d3c00efd80d211cd:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/default-logins/wildfly/wildfly-default-login.yaml"

View on Github