LabKey Server Login Panel - Detect

What is the "LabKey Server Login Panel - Detect?"

The "LabKey Server Login Panel - Detect" module is designed to detect the presence of the LabKey Server login panel. LabKey Server is a software platform used for managing and analyzing scientific data. This module focuses on identifying the login panel specifically.

The severity of this module is classified as informative, meaning it provides information rather than indicating a vulnerability or misconfiguration.

Author: tess

Impact

This module does not have a direct impact on the security of the LabKey Server. It simply detects the presence of the login panel, providing information about its existence.

How does the module work?

The module works by sending HTTP requests to specific paths associated with the LabKey Server login panel. It then applies matching conditions to determine if the login panel is present.

An example of an HTTP request sent by this module:

GET /labkey/home/login-login.view

The module uses the following matching conditions:

- The response body must contain the words "TCTU LabKey Server: /home" and "Powered by LabKey". - The response header must contain the word "text/html". - The HTTP status code must be 200.

All of these conditions must be met for the module to detect the LabKey Server login panel.