Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Hashicorp Consul Agent - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#tech#consul#api
Description

What is the "Hashicorp Consul Agent - Detect?"

The "Hashicorp Consul Agent - Detect" module is designed to detect the presence of the Hashicorp Consul Agent software. Hashicorp Consul Agent is a tool used for service discovery, configuration, and orchestration in distributed systems. This module focuses on detecting the agent's configuration and provides informative results.

This module has an informative severity level, meaning it provides valuable information without indicating any immediate vulnerabilities or misconfigurations.

Author: c-sh0

Impact

This module does not have any direct impact on the target system. It solely focuses on detecting the presence of the Hashicorp Consul Agent software and providing information about its configuration.

How does the module work?

The "Hashicorp Consul Agent - Detect" module works by sending an HTTP GET request to the target system's "/v1/agent/self" endpoint. It then analyzes the response to identify specific keywords related to the agent's configuration.

Matching conditions:

- The response must contain the words "Datacenter", "Revision", and "PrimaryDatacenter" in any part of the response.

If the response meets these conditions, the module reports a successful detection of the Hashicorp Consul Agent.

Example HTTP request:

GET /v1/agent/self

Note: The above example is a simplified representation of the actual HTTP request used by the module.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/v1/agent/self
Matching conditions
word: "Datacenter":, "Revision":, "PrimaryData...
Passive global matcher
No matching conditions.
On match action
Report vulnerability