Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

MinIO Browser Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#minio
Description

What is the "MinIO Browser Login Panel - Detect?"

The "MinIO Browser Login Panel - Detect" module is designed to detect the presence of the MinIO Browser login panel. MinIO is an open-source object storage server that is compatible with Amazon S3. This module focuses on identifying the login panel and is used to detect misconfigurations or vulnerabilities related to it. The severity of this module is informative, meaning it provides information rather than indicating a critical issue. The original author of this module is not specified.

Impact

This module does not have a direct impact on the system being scanned. It is used to gather information about the presence of the MinIO Browser login panel, which can help identify potential security risks or misconfigurations.

How the module works?

The "MinIO Browser Login Panel - Detect" module works by sending an HTTP GET request to the "/minio/login" path. It then applies two matching conditions to determine if the MinIO Browser login panel is present:

    - The module checks if the response body contains the HTML title tag "<title>minio browser</title>". This condition is case-insensitive and checks for an exact match. - The module verifies that the response status code is 200, indicating a successful request.

If both conditions are met, the module considers the MinIO Browser login panel to be detected.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/minio/login
Matching conditions
dsl: contains(toLower(body), `<title>minio br...and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability