Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Movable Type Pro Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#movable
Description

What is the "Movable Type Pro Login Panel - Detect?"

The "Movable Type Pro Login Panel - Detect" module is designed to detect the presence of the Movable Type Pro login panel. Movable Type Pro is a content management system (CMS) used for creating and managing websites. This module focuses on identifying the login panel specifically.

The severity of this module is classified as informative, meaning it provides information rather than indicating a vulnerability or misconfiguration.

This module was authored by dhiyaneshDk.

Impact

This module does not have a direct impact on the security or functionality of the Movable Type Pro login panel. It simply detects its presence and provides information about it.

How does the module work?

The "Movable Type Pro Login Panel - Detect" module works by sending HTTP requests to specific paths associated with the Movable Type Pro login panel, such as "/mt/admin" and "/mt.cgi". It then applies matching conditions to determine if the login panel is present.

One example of a matching condition is checking the response body for the presence of the phrase "Movable Type Pro". Additionally, the module verifies that the HTTP response status is 200, indicating a successful request.

By combining these matching conditions, the module can accurately detect the Movable Type Pro login panel.

For example, the module may send a GET request to "/mt/admin" or "/mt.cgi" and expect to find the phrase "Movable Type Pro" in the response body with a status code of 200.

The module also includes metadata such as the maximum number of requests (2) and a Shodan query for further exploration.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/mt/admin/mt.cgi
Matching conditions
word: Movable Type Proand
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability