Automate Recon and scanning process with Vidoc. All security teams in one place
The "MSPControl Login Panel - Detect" module is designed to detect the presence of the MSPControl login panel. MSPControl is a software solution that provides a control panel for managing web hosting services. This module focuses on identifying any misconfigurations or vulnerabilities related to the login panel.
This module has an informative severity level, which means it provides valuable information but does not pose an immediate threat to the system.
The module does not directly impact the system. Instead, it helps identify potential security weaknesses or misconfigurations in the MSPControl login panel. By detecting these issues, system administrators can take appropriate actions to enhance the security and stability of their web hosting services.
The "MSPControl Login Panel - Detect" module works by sending an HTTP GET request to the "/Default.aspx?pid=Login" path of the target website. It includes a specific cookie ("UserCulture=en-US") in the request headers.
The module uses two matching conditions to determine if the MSPControl login panel is present:
Both matching conditions must be met for the module to consider the MSPControl login panel detected.
For example, the module sends an HTTP GET request to "/Default.aspx?pid=Login" with the "UserCulture=en-US" cookie. It then checks if the response body contains either "MSPControl - Sign In" or "Sign In to Control Panel" keywords. Additionally, it verifies that the response status code is 200. If both conditions are satisfied, the module reports the presence of the MSPControl login panel.