Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Gespage Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#gespage
Description

What is the "Gespage Login Panel - Detect" module?

The "Gespage Login Panel - Detect" module is designed to detect the presence of the Gespage login panel. Gespage is a software used for managing printing and copying services in organizations. This module focuses on identifying the login panel specifically.

The severity of this module is classified as informative, which means it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by pikpikcu and daffainfo.

Impact

The impact of detecting the Gespage login panel is primarily informational. It does not indicate any immediate security risks or vulnerabilities. However, it can provide insights into the presence of the Gespage software within a target system.

How does the module work?

The module works by sending an HTTP GET request to the "/gespage/webapp/login.xhtml" path. It then applies two matching conditions to determine if the Gespage login panel is present:

    - The module checks if the response body contains the following CSS stylesheet links:
    <link rel="stylesheet" href="css/gespage.css" />
    <link rel="stylesheet" href="css/menugrey.css" />
    - The module verifies that the response status code is 200 (OK).

If both conditions are met, the module reports the detection of the Gespage login panel.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/gespage/webapp/logi...
Matching conditions
word: <link rel="stylesheet" href="css/gespage...and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability