MSPControl Login Panel - Detect

What is the "MSPControl Login Panel - Detect" module?

The "MSPControl Login Panel - Detect" module is designed to detect the presence of the MSPControl login panel. MSPControl is a software solution that provides a control panel for managing web hosting services. This module focuses on identifying any misconfigurations or vulnerabilities related to the login panel.

This module has an informative severity level, which means it provides valuable information but does not pose an immediate threat to the system.

Impact

The module does not directly impact the system. Instead, it helps identify potential security weaknesses or misconfigurations in the MSPControl login panel. By detecting these issues, system administrators can take appropriate actions to enhance the security and stability of their web hosting services.

How the module works?

The "MSPControl Login Panel - Detect" module works by sending an HTTP GET request to the "/Default.aspx?pid=Login" path of the target website. It includes a specific cookie ("UserCulture=en-US") in the request headers.

The module uses two matching conditions to determine if the MSPControl login panel is present:

- The first condition checks the response body for the presence of either "MSPControl - Sign In" or "Sign In to Control Panel" keywords. If either of these keywords is found, it indicates that the login panel is present. - The second condition verifies that the HTTP response status code is 200, indicating a successful request. This condition ensures that the login panel is accessible.

Both matching conditions must be met for the module to consider the MSPControl login panel detected.

For example, the module sends an HTTP GET request to "/Default.aspx?pid=Login" with the "UserCulture=en-US" cookie. It then checks if the response body contains either "MSPControl - Sign In" or "Sign In to Control Panel" keywords. Additionally, it verifies that the response status code is 200. If both conditions are satisfied, the module reports the presence of the MSPControl login panel.