Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

FRPS Dashboard - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#frp#unauth#panel
Description

What is the "FRPS Dashboard - Detect" module?

The "FRPS Dashboard - Detect" module is designed to detect the presence of the FRPS Dashboard panel. FRPS Dashboard is a software component that is part of the FRP project, which can be found on GitHub. This module focuses on identifying misconfigurations or vulnerabilities related to the FRPS Dashboard panel. The severity of the detected issues is classified as informative.

Impact

The impact of the FRPS Dashboard panel detection module is primarily to provide information about the presence of the FRPS Dashboard panel. It does not directly indicate any specific security risks or vulnerabilities. However, the detection of the panel may suggest potential misconfigurations or security weaknesses that could be further investigated.

How does the module work?

The module works by sending an HTTP GET request to the target and analyzing the response. The request is sent to the "/static/" path of the target. The module then applies two matching conditions to determine if the FRPS Dashboard panel is present:

    - The response body is checked for the presence of the "<title>frps dashboard</title>" HTML tag. - The response status code is checked to ensure it is 200 (OK).

If both conditions are met, the module considers the FRPS Dashboard panel to be detected.

Reference:

- https://github.com/fatedier/frp/

Metadata:

max-request: 1

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/static/
Matching conditions
word: <title>frps dashboard</title>and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability