Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

OKIOK S-Filer Portal Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#okiko#panel
Description

What is the "OKIOK S-Filer Portal Login Panel - Detect?"

The "OKIOK S-Filer Portal Login Panel - Detect" module is designed to detect the presence of the OKIOK S-Filer Portal login panel. This module focuses on identifying potential misconfigurations or vulnerabilities in the login panel. The severity of this module is classified as informative, meaning it provides valuable information but does not pose an immediate threat. The original author of this module is johnk3r.

Impact

This module does not directly impact the system or software being scanned. Instead, it provides information about the presence of the OKIOK S-Filer Portal login panel, allowing users to assess the security posture of their system and take appropriate actions if necessary.

How does the module work?

The "OKIOK S-Filer Portal Login Panel - Detect" module works by sending an HTTP GET request to the "/sfiler/Login.action" path. It then applies two matching conditions to determine if the login panel is present:

- The module checks if the response body contains the HTML title tag "<title>S-Filer Portal - Login</title>". - The module verifies that the response status code is 200, indicating a successful request.

If both conditions are met, the module reports a detection of the OKIOK S-Filer Portal login panel.

For example, the module sends the following HTTP request:

GET /sfiler/Login.action

The module then checks the response body for the presence of "<title>S-Filer Portal - Login</title>" and verifies that the response status code is 200.

By using these matching conditions, the module can accurately identify the OKIOK S-Filer Portal login panel.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/sfiler/Login.action
Matching conditions
word: <title>S-Filer Portal - Login</title>and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability