Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

OpenX Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#openx#login
Description

What is the "OpenX Login Panel - Detect?"

The "OpenX Login Panel - Detect" module is designed to detect the presence of the OpenX login panel. OpenX, now known as Revive Adserver, is an open-source ad serving platform. This module helps identify instances of OpenX login panels, which can be useful for detecting misconfigurations or vulnerabilities related to the login functionality.

This module has an informative severity level, meaning it provides valuable information but does not indicate a critical security issue.

Author: pikpikcu

Impact

This module does not directly impact the system being scanned. It simply detects the presence of the OpenX login panel, providing information about the software being used.

How does the module work?

The "OpenX Login Panel - Detect" module works by sending HTTP requests to specific paths, such as "/www/admin/index.php" and "/admin/index.php". It then applies matching conditions to determine if the OpenX login panel is present.

Matching conditions:

- Check if the response body contains the HTML title tag "<title>OpenX</title>". - Check if the response status code is 200 (OK).

If both conditions are met, the module considers the OpenX login panel to be detected.

Example HTTP request:

GET /www/admin/index.php

Note: The module also provides additional metadata, such as the maximum number of requests (2) and a Shodan query for further investigation.

Reference: https://www.revive-adserver.com/download/

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/www/admin/index.php/admin/index.php
Matching conditions
regex: <title>OpenX</title>and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability