Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Ivanti Incapptic Connect Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#ivanti#incapptic-connect
Description

What is the "Ivanti Incapptic Connect Panel - Detect" module?

The "Ivanti Incapptic Connect Panel - Detect" module is designed to detect the presence of the Ivanti Incapptic Connect panel. This panel is a software component used for managing mobile app deployments. The module focuses on identifying misconfigurations, vulnerabilities, or specific software fingerprints related to the Ivanti Incapptic Connect panel. The severity of the findings is classified as informative, providing valuable insights without indicating immediate threats. The module was authored by righettod.

Impact

The impact of the findings from the "Ivanti Incapptic Connect Panel - Detect" module depends on the specific misconfigurations, vulnerabilities, or software fingerprints detected. It is important to address any identified issues to ensure the secure and optimal functioning of the Ivanti Incapptic Connect panel.

How does the module work?

The "Ivanti Incapptic Connect Panel - Detect" module operates by performing HTTP requests and evaluating matching conditions. One example of an HTTP request used by the module is a GET request to the path "/static/img/custom_icons/favicon.ico". The module applies two matching conditions to this request:

- The first condition checks if the response status code is 200 and if the response body contains the term "incapptic". - The second condition verifies if the response status code is 200 and if the hash value of the response body matches a specific value.

The module considers a match if either of these conditions is met. The matching conditions help identify the presence of the Ivanti Incapptic Connect panel based on specific characteristics. The module can be customized with additional requests and conditions to enhance its detection capabilities.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/static/img/custom_i...
Matching conditions
dsl: status_code==200, contains(toLower(body)...or
dsl: status_code==200, (`-1067582922` == mmh3...
Passive global matcher
No matching conditions.
On match action
Report vulnerability