MeterSphere Login Panel - Detect

What is the "MeterSphere Login Panel - Detect?"

The "MeterSphere Login Panel - Detect" module is designed to detect the presence of the MeterSphere login panel. MeterSphere is a software platform used for continuous testing and monitoring of applications. This module focuses on identifying the login panel specifically.

This module has an informative severity level, meaning it provides valuable information but does not indicate a critical vulnerability or misconfiguration.

Author: pdteam

Impact

This module does not have a direct impact on the system. It serves as a detection mechanism to identify the presence of the MeterSphere login panel. The results of this module can be used to further assess the security posture of the MeterSphere installation.

How does the module work?

The module works by sending HTTP requests to specific paths ("/favicon.ico" and "/login") and applying matching conditions to determine if the MeterSphere login panel is present.

Example HTTP request:

GET /login

The module uses the following matching conditions:

- Status code must be 200 - The response body must contain the string "metersphere" (case-insensitive) - The response headers must contain the header "ms_session_id"

If any of these conditions are met, the module considers the MeterSphere login panel to be detected.

Reference: https://github.com/metersphere/metersphere

Metadata: max-request: 2