Faraday Login Panel - Detect

What is the "Faraday Login Panel - Detect?"

The "Faraday Login Panel - Detect" module is designed to detect the presence of the Faraday login panel. Faraday is a software platform used for vulnerability management and penetration testing. This module focuses on identifying the login panel specifically.

The severity of this module is classified as informative, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by dhiyaneshDK.

Impact

This module does not have a direct impact on the security of the target system. It simply detects the presence of the Faraday login panel, providing information about the software being used.

How does the module work?

The "Faraday Login Panel - Detect" module works by sending an HTTP GET request to the "/#/login" path of the target system. It then applies two matching conditions to determine if the Faraday login panel is present:

- The first matching condition checks if the response body contains the string "ng-app="faradayApp">". This indicates the presence of the Faraday login panel. - The second matching condition verifies that the response status is 200, indicating a successful request.

If both matching conditions are met, the module reports the detection of the Faraday login panel.

Example HTTP request:

GET /#/login

Matching conditions:

- Response body contains the string "ng-app="faradayApp">" - Response status is 200