BMC Discovery Login Panel - Detect

What is the "BMC Discovery Login Panel - Detect?"

The "BMC Discovery Login Panel - Detect" module is designed to detect the presence of the BMC Discovery login panel. BMC Discovery is a software solution used for discovering and mapping IT assets within an organization's network. This module focuses on identifying the login panel specifically.

The severity of this module is classified as informative, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by daffainfo.

Impact

The impact of detecting the BMC Discovery login panel is primarily informational. It signifies the presence of the login panel, but does not indicate any immediate security risks or vulnerabilities.

How does the module work?

The module works by sending an HTTP GET request to the "/ui/" path of the target. It then applies two matching conditions to determine if the BMC Discovery login panel is present:

- The response body must contain the words "BMC Discovery:" and "Discovery". - The response status code must be 200 (OK).

If both conditions are met, the module reports the detection of the BMC Discovery login panel.

Example HTTP request:

GET /ui/ HTTP/1.1
Host: [target]

Matching conditions:

- Response body must contain the words "BMC Discovery:" and "Discovery". - Response status code must be 200.