Fortinet Login Panel - Detect

What is the "Fortinet Login Panel - Detect?"

The "Fortinet Login Panel - Detect" module is designed to detect the presence of a Fortinet login panel. Fortinet is a software company that provides cybersecurity solutions. This module focuses on identifying the login panel, which can help in assessing the security posture of a Fortinet installation. The severity of this module is classified as informative, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by pikpikcu and daffainfo.

Impact

The impact of detecting a Fortinet login panel is primarily informational. It signifies the presence of a login interface for Fortinet, which may be used for administrative access to the system. However, the module does not assess the security of the login panel or indicate any vulnerabilities or misconfigurations.

How does the module work?

The "Fortinet Login Panel - Detect" module operates by sending HTTP requests to the target system and analyzing the responses. It uses specific matching conditions to identify the presence of a Fortinet login panel.

One of the matching conditions is a word matcher that looks for the presence of the HTML title tag "<title tiles:fragment="title">FORTINET LOGIN</title>" in the response body. This indicates the presence of a login panel with the title "FORTINET LOGIN".

Another matching condition checks the HTTP response status code, specifically looking for a 200 status code. This confirms that the login panel page was successfully accessed.

By combining these matching conditions, the module can determine if a Fortinet login panel is present on the target system.