Ntopng Traffic Dashboard - Detect

What is the "Ntopng Traffic Dashboard - Detect" module?

The "Ntopng Traffic Dashboard - Detect" module is designed to detect the presence of the Ntopng traffic dashboard. Ntopng is a software that provides network traffic monitoring and analysis capabilities. This module focuses on identifying the specific traffic dashboard component of Ntopng.

The severity of this module is classified as medium.

Author: theamanrawat

Impact

The impact of detecting the Ntopng traffic dashboard is dependent on the specific context and configuration of the deployment. However, it can potentially reveal information about network traffic patterns and usage, which may have implications for network security and privacy.

How does the module work?

The module works by sending HTTP requests and matching the responses against predefined conditions. It checks for the presence of specific content in the response body, such as the "<title>ntopng - Traffic Dashboard</title>" tag and the URL "https://github.com/ntop/ntopng". Additionally, it verifies that the HTTP response status is 200.

Example HTTP request:

GET / HTTP/1.1
Host: example.com

The module uses these matching conditions to determine if the Ntopng traffic dashboard is present on the target system.