OpenNMS Web Console Login Panel - Detect

What is the "OpenNMS Web Console Login Panel - Detect?"

The "OpenNMS Web Console Login Panel - Detect" module is designed to detect the presence of the OpenNMS Web Console login panel. OpenNMS is a network management platform that provides monitoring and management capabilities for network devices and services. This module specifically focuses on identifying the login panel, which is an essential component of the OpenNMS Web Console.

The severity of this module is classified as informative, indicating that it provides valuable information about the presence of the login panel but does not directly indicate any vulnerabilities or misconfigurations.

This module was authored by DhiyaneshDk.

Impact

The impact of detecting the OpenNMS Web Console login panel is primarily informational. It confirms the presence of the login panel, which is an expected component of the OpenNMS Web Console. However, it does not provide any specific details about potential vulnerabilities or misconfigurations.

How does the module work?

The module works by sending an HTTP GET request to the "/opennms/login.jsp" path of the target website. It then applies two matching conditions to determine if the OpenNMS Web Console login panel is present:

- The first matching condition checks if the response body contains the phrase "OpenNMS Web Console". - The second matching condition verifies that the HTTP response status is 200, indicating a successful request.

If both matching conditions are met, the module reports the detection of the OpenNMS Web Console login panel.

Example HTTP request:

GET /opennms/login.jsp

The module's matching conditions:

- Condition 1: The response body must contain the phrase "OpenNMS Web Console". - Condition 2: The HTTP response status must be 200.

By analyzing the response body and status, the module determines if the OpenNMS Web Console login panel is present on the target website.