GoAnywhere Web Client Login Panel - Detect

What is the "GoAnywhere Web Client Login Panel - Detect?"

The "GoAnywhere Web Client Login Panel - Detect" module is designed to detect the presence of the GoAnywhere Web Client login panel. GoAnywhere is a software solution that provides secure file transfer and encryption capabilities. This module focuses on identifying the login panel specifically.

This module has an informative severity level, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

Author: iamthefrogy

Impact

This module does not have a direct impact on the system being scanned. It simply detects the presence of the GoAnywhere Web Client login panel, providing information about its existence.

How does the module work?

The module works by sending an HTTP GET request to the "/webclient/Login.xhtml" path. It then applies matching conditions to the response to determine if the login panel is present.

The matching conditions for this module include checking if the response contains the phrases "Powered by GoAnywhere" or "GoAnywhere.com". If either of these phrases is found, the module considers the login panel to be present.

Example HTTP request:

GET /webclient/Login.xhtml

Matching conditions:

- Response contains "Powered by GoAnywhere" or "GoAnywhere.com"