Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

MACH-ProWeb Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#machproweb#edb
Description

What is the "MACH-ProWeb Login Panel - Detect?"

The "MACH-ProWeb Login Panel - Detect" module is designed to detect the presence of the MACH-ProWeb login panel. MACH-ProWeb is a software used for web-based access control and building management systems. This module focuses on identifying the login panel specifically.

The severity of this module is classified as informative, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by Jaskaran.

Impact

This module does not have a direct impact on the system being scanned. It simply detects the presence of the MACH-ProWeb login panel, providing information about its existence.

How does the module work?

The module works by sending an HTTP GET request to the "/login.html" path of the target website. It then applies two matching conditions to determine if the MACH-ProWeb login panel is present:

- The module checks if the response body contains the phrase "Log on to MACH-ProWeb". - The module verifies that the response status code is 200 (OK).

If both conditions are met, the module reports a successful detection of the MACH-ProWeb login panel.

For example, the module sends an HTTP GET request to "/login.html" and expects a response with a status code of 200 and the phrase "Log on to MACH-ProWeb" in the body.

GET /login.html
Status: 200 OK

<html>
  <body>
    <h1>Log on to MACH-ProWeb</h1>
    <!-- Other login panel elements -->
  </body>
</html>

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/login.html
Matching conditions
word: Log on to MACH-ProWeband
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability