Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Archibus Web Central Login - Panel Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#archibus
Description

What is the "Archibus Web Central Login - Panel Detect?"

The "Archibus Web Central Login - Panel Detect" module is designed to detect the presence of the Archibus Web Central login panel. Archibus Web Central is a software platform used for facility management and real estate operations. This module focuses on identifying any misconfigurations or vulnerabilities related to the login panel.

This module has an informative severity level, which means it provides valuable information without indicating any immediate security risks. It is important to note that this module is not designed to exploit any vulnerabilities but rather to identify potential issues that may require further investigation.

Impact

The impact of this module is primarily informational. It helps administrators and security professionals identify any misconfigurations or vulnerabilities related to the Archibus Web Central login panel. By detecting these issues, organizations can take appropriate measures to secure their facility management and real estate operations.

How the module works?

The "Archibus Web Central Login - Panel Detect" module works by sending HTTP requests to specific paths associated with the Archibus Web Central login panel. It then applies matching conditions to determine if the login panel is present and if any potential misconfigurations or vulnerabilities exist.

For example, one of the matching conditions checks if the response status is 200, indicating a successful request. Additionally, the module checks for specific words like "ARCHIBUS," "Continue As a Guest," and "login" within the response content to further confirm the presence of the login panel.

By combining these matching conditions, the module can accurately detect the Archibus Web Central login panel and provide valuable insights into its configuration and security status.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/archibus/login.axvw/archibus/schema/ab-...
Matching conditions
word: ARCHIBUSand
word: Continue As a Guest, loginand
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability