Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

FastAPI Docs Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#fastapi#tech#panel
Description

What is the "FastAPI Docs Panel - Detect?"

The "FastAPI Docs Panel - Detect" module is designed to detect the presence of the FastAPI Docs panel. FastAPI is a modern, fast (high-performance), web framework for building APIs with Python 3.7+ based on standard Python type hints. This module focuses on identifying the FastAPI Docs panel and provides information about its configuration. The severity of this module is classified as informative, meaning it provides valuable insights but does not pose an immediate security risk. The original author of this module is github.com/its0x08.

Impact

This module does not have a direct impact on the security of the target system. It is primarily used for information gathering purposes to identify the presence and configuration of the FastAPI Docs panel.

How does the module work?

The "FastAPI Docs Panel - Detect" module works by sending HTTP requests to specific paths on the target system. It checks for the presence of certain strings in the response body to determine if the FastAPI Docs panel is present. The module sends GET requests to the following paths: /docs, /redoc, and /openapi.json.

The module uses matching conditions to identify the FastAPI Docs panel. It looks for specific strings in the response body, including "", "", and "{\"title\":\"FastAPI\"". If any of these strings are found, the module considers the FastAPI Docs panel to be present.

It's important to note that this module does not perform any active exploitation or modification of the target system. It simply detects the presence of the FastAPI Docs panel and provides information about its configuration.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/docs/redoc/openapi.json
Matching conditions
word: <title>FastAPI - Swagger UI</title>, <ti...
Passive global matcher
No matching conditions.
On match action
Report vulnerability