Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

CheckPoint SSL Network Extender Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#checkpoint#router
Description

What is the "CheckPoint SSL Network Extender Login Panel - Detect?" module?

The "CheckPoint SSL Network Extender Login Panel - Detect" module is designed to detect the presence of the CheckPoint SSL Network Extender login panel. This module focuses on identifying misconfigurations or vulnerabilities related to the login panel.

The severity of this module is classified as informative, meaning it provides valuable information about the presence of the login panel but does not indicate an immediate security risk.

This module was authored by idealphase.

Impact

The impact of the CheckPoint SSL Network Extender login panel being detected depends on the specific context and configuration of the system. However, the presence of this login panel may indicate potential security risks, such as unauthorized access or misconfiguration of the SSL Network Extender.

How does the module work?

The module works by sending an HTTP GET request to the "/login.html" path of the target system. It then applies matching conditions to determine if the CheckPoint SSL Network Extender login panel is present.

The matching conditions used by this module are:

- Check if the response body contains the HTML title tag "<TITLE>SSL Network Extender Login</TITLE>". - Check if the response status code is 200 (OK).

If both matching conditions are met, the module considers the CheckPoint SSL Network Extender login panel to be detected.

It's important to note that this module does not perform any active exploitation or modification of the target system. It solely focuses on identifying the presence of the login panel.

For more information, you can refer to the CheckPoint support center.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/login.html
Matching conditions
word: <TITLE>SSL Network Extender Login</TITLE...and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability