Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Cobbler WebGUI Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#cobbler#webserver#panel
Description

What is the "Cobbler WebGUI Login Panel - Detect?" module?

The "Cobbler WebGUI Login Panel - Detect" module is designed to detect the presence of the Cobbler WebGUI login panel. Cobbler is a software tool used for managing Linux installation servers. This module focuses on identifying the login panel specifically.

This module has an informative severity level, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by c-sh0.

Impact

The impact of detecting the Cobbler WebGUI login panel is primarily informational. It does not indicate any immediate security risks or vulnerabilities. Instead, it provides insight into the presence of the login panel, which can be useful for further analysis and assessment of the system.

How does the module work?

The module works by sending an HTTP GET request to the "/cobbler_web" path. It then applies matching conditions to determine if the Cobbler WebGUI login panel is present.

The matching conditions include:

- Checking the HTTP response status code, which should be 200. - Searching for specific keywords in the response body, such as "<title>Cobbler Web Interface</title>", "/cobbler_webui_content/", and "/cobbler_web/do_login".

If all the matching conditions are met, the module reports the detection of the Cobbler WebGUI login panel.

Example HTTP request:

GET /cobbler_web

Note: The above example is a simplified representation of the HTTP request and does not include headers or other details.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/cobbler_web
Matching conditions
status: 200and
word: <title>Cobbler Web Interface</title>, /c...
Passive global matcher
No matching conditions.
On match action
Report vulnerability