Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Horde Webmail Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#horde#webmail#panel
Description

What is the "Horde Webmail Login Panel - Detect?"

The "Horde Webmail Login Panel - Detect" module is designed to detect the presence of the Horde Webmail login panel. Horde Webmail is a popular web-based email client used by many organizations. This module focuses on identifying the login panel specifically.

The severity of this module is classified as informative, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by ritikchaddha.

Impact

This module does not have a direct impact on the target system. It simply detects the presence of the Horde Webmail login panel, providing information about its existence.

How does the module work?

The module works by sending HTTP requests to specific paths associated with the Horde Webmail login panel, namely "/horde/imp/login.php" and "/imp/login.php". It then applies matching conditions to determine if the login panel is present.

There are two matching conditions used in this module:

    - Word Matcher: The module looks for the presence of the phrase "Welcome to Horde" in the response body of the HTTP request. If this phrase is found, it indicates the presence of the Horde Webmail login panel. - Status Matcher: The module checks if the HTTP response status code is 200, indicating a successful request. This condition further confirms the presence of the login panel.

By combining these matching conditions, the module can accurately detect the Horde Webmail login panel.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/horde/imp/login.php/imp/login.php
Matching conditions
word: Welcome to Hordeand
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability