Merge pull request #12424 from projectdiscovery/totolink-installer

Create totolink-setup-page-detect.yaml

Author: pussycat0x

http/misconfiguration/installer/totolink-installer.yaml

@@ -0,0 +1,29 @@
+id: totolink-installer
+
+info:
+  name: TOTOLINK Installer - Exposure
+  author: ritikchaddha
+  severity: high
+  description: |
+    Detects the presence of TOTOLINK router setup pages at /wizardset.htm and /easy_setup.htm.
+  metadata:
+    verified: true
+    product: TOTOLINK
+    shodan-query: title:"TOTOLINK"
+    fofa-query: title="TOTOLINK"
+  tags: totolink,router,setup,exposure,installer
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wizardset.htm"
+      - "{{BaseURL}}/easy_setup.htm"
+
+    stop-at-first-match: true
+    matchers:
+      - type: dsl
+        dsl:
+          - 'status_code==200'
+          - 'contains(tolower(body), "totolink")'
+          - 'contains_any(body, "SRC=\"easy_setup.htm", "value=\"Advanced Setup", "show_wapi_settings")'
+        condition: and