Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Atlassian Crowd Login Panel

By kannthu

Informative
Vidoc logoVidoc Module
#panel#atlassian
Description

What is the "Atlassian Crowd Login Panel?"

The "Atlassian Crowd Login Panel" module is designed to detect the presence of an Atlassian Crowd login panel. Atlassian Crowd is a single sign-on and user identity management solution that allows organizations to manage user access to their applications and services. This module focuses on identifying the login panel specifically.

This module has an informative severity level, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by organiccrap.

Impact

The impact of the "Atlassian Crowd Login Panel" module is informational. It does not indicate any security vulnerabilities or misconfigurations. Instead, it provides information about the presence of an Atlassian Crowd login panel, which can be useful for understanding the authentication mechanisms in place.

How does the module work?

The "Atlassian Crowd Login Panel" module works by sending a GET request to the "/crowd/console/login.action" path. It then checks the response body for the presence of the "" HTML tag. If this tag is found, the module considers the login panel to be present.

Here is an example of the HTTP request sent by the module:

GET /crowd/console/login.action

The module uses a single matching condition, which checks for the presence of the "" tag in the response body. If this condition is met, the module reports the presence of the login panel.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/crowd/console/login...
Matching conditions
word: <title>Atlassian Crowd - Login</title>
Passive global matcher
No matching conditions.
On match action
Report vulnerability