Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Beego Admin Dashboard Panel- Detect

By kannthu

Medium
Vidoc logoVidoc Module
#panel#beego#unauth
Description

Beego Admin Dashboard Panel- Detect

What is the "Beego Admin Dashboard Panel- Detect"?

The "Beego Admin Dashboard Panel- Detect" module is designed to detect the presence of the Beego Admin Dashboard panel. Beego Admin Dashboard is a software that provides an administrative interface for managing configurations and settings. This module focuses on identifying instances of the Beego Admin Dashboard panel that may be misconfigured or vulnerable.

This module has a severity level of medium, indicating that the detected issues may have a moderate impact on the security of the system.

Author: DhiyaneshDk

Impact

If the Beego Admin Dashboard panel is misconfigured or vulnerable, it could potentially expose sensitive information or allow unauthorized access to the system. This can lead to unauthorized modifications, data breaches, or other security risks.

How does the module work?

The "Beego Admin Dashboard Panel- Detect" module works by sending an HTTP GET request to the "/listconf?command=conf" endpoint. It then applies a set of matching conditions to determine if the response indicates the presence of the Beego Admin Dashboard panel.

The matching conditions include:

- The response body must contain the words "Welcome to Beego Admin Dashboard" and "Configurations". - The response headers must include the word "text/html". - The HTTP status code must be 200.

If all of these conditions are met, the module considers the Beego Admin Dashboard panel to be detected.

Reference:

- https://github.com/beego - https://twitter.com/shaybt12/status/1584112903577567234/photo/1

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/listconf?command=co...
Matching conditions
word: Welcome to Beego Admin Dashboard, Config...and
word: text/htmland
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability