Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

GLPI Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#glpi#edb#panel
Description

What is the "GLPI Panel - Detect" module?

The "GLPI Panel - Detect" module is a test case designed to detect the presence of the GLPI panel. GLPI is a software used for IT asset management and service desk management. This module focuses on identifying the GLPI panel and does not perform any actions beyond detection. The severity of this module is classified as informative, meaning it provides information about the presence of the GLPI panel but does not indicate any specific vulnerabilities or misconfigurations.

This module was authored by dogasantos, daffainfo, ricardomaia, and dhiyaneshDk.

Impact

The impact of the "GLPI Panel - Detect" module is limited to providing information about the presence of the GLPI panel. It does not perform any actions or modifications to the target system.

How does the module work?

The "GLPI Panel - Detect" module works by sending HTTP requests to the target system and analyzing the responses. It uses specific matching conditions to identify the presence of the GLPI panel. One example of an HTTP request sent by this module could be:

GET /CHANGELOG.md

The module then applies matching conditions to the response to determine if it contains keywords related to GLPI, such as "GLPI" or "glpi-project.org". The matching conditions are case-insensitive, meaning they will detect both uppercase and lowercase variations of the keywords. The module uses an "and" condition, meaning all specified keywords must be present in the response for a match to occur.

By analyzing the responses and applying the matching conditions, the module can determine if the GLPI panel is present on the target system.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/CHANGELOG.md/glpi/
Matching conditions
word: GLPI, glpi-project.org
Passive global matcher
No matching conditions.
On match action
Report vulnerability