Skip to content

[FALSE-NEGATIVE] idrac9 default login #12697

@Segudmu

Description

@Segudmu

Template IDs or paths

- http/default-logins/dell/dell-idrac9-default-login.yaml

Environment

- OS: Ubuntu 22.04
- Nuclei: v3.4.4

Steps To Reproduce

./nuclei -target xxx.xxx.xxx.xxx -t ./nuclei-templates/http/default-logins/dell/dell-idrac9-default-login.yaml -debug

Relevant dumped responses

[DBG] [dell-idrac9-default-login] Dumped HTTP response https://x.x.x.x/sysmgmt/2015/bmc/session

HTTP/1.1 201 Created
Connection: close
Content-Length: 25
Content-Type: application/json; charset=utf-8
Date: Wed, 23 Jul 2025 19:28:30 GMT
Server: Apache
Set-Cookie: -http-session-=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx path=/; SameSite=Strict; httponly; secure;
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Variable-Authnz_user: root
X-Frame-Options: DENY
Xsrf-Token: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

{
    "authResult" : 0
}

Anything else?

Changing line 42 from - '"authResult":0' to - '"authResult" : 0' seems to resolve the issue.

Metadata

Metadata

Assignees

Labels

DoneReady to mergefalse-negativeNuclei template missing valid results

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions