Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

N-central Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#n-central
Description

What is the "N-central Login Panel - Detect?"

The "N-central Login Panel - Detect" module is designed to detect the presence of the N-central login panel. N-central is a software used for remote monitoring and management of IT infrastructure. This module focuses on identifying potential misconfigurations or vulnerabilities related to the login panel.

This module has an informative severity level, which means it provides valuable information but does not pose an immediate threat.

This module was authored by theabhinavgaur.

Impact

The detection of the N-central login panel does not directly indicate any impact or vulnerability. However, it can be an important step in identifying potential security risks or misconfigurations in the N-central software.

How does the module work?

The "N-central Login Panel - Detect" module works by sending an HTTP GET request to the "/login" path of the target website. It then applies two matching conditions to determine if the N-central login panel is present:

    - The module checks the response body for the presence of the HTML class attribute "ncentral". This indicates that the login panel belongs to the N-central software. - The module verifies that the HTTP response status code is 200, indicating a successful request.

If both conditions are met, the module reports the detection of the N-central login panel.

Example HTTP request:

GET /login

Matching conditions:

- Response body contains the HTML class attribute "ncentral" - HTTP response status code is 200

Please note that this module is part of the Vidoc platform and is used for scanning and identifying potential security issues in the N-central software.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/login
Matching conditions
word: class="ncentral"and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability