Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Oracle PeopleSoft Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#oracle#panel
Description

What is the "Oracle PeopleSoft Login Panel - Detect?"

The "Oracle PeopleSoft Login Panel - Detect" module is designed to detect the presence of the Oracle PeopleSoft login panel. Oracle PeopleSoft is a widely used software suite that provides human resources, financial management, and student administration solutions for organizations. This module focuses on identifying the login panel specifically.

The severity of this module is classified as informative, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by idealphase.

Impact

The impact of detecting the Oracle PeopleSoft login panel is primarily informational. It does not indicate any immediate security risks or vulnerabilities. However, it can provide insights into the presence of Oracle PeopleSoft within a target system or network.

How does the module work?

The "Oracle PeopleSoft Login Panel - Detect" module works by sending HTTP requests and analyzing the responses to determine if the Oracle PeopleSoft login panel is present. It uses specific matching conditions to identify the login panel accurately.

One of the matching conditions is checking the response body for the presence of the "<title>Oracle PeopleSoft Sign-in</title>" HTML tag and the "alt="Oracle PeopleSoft Sign-in" title="Oracle PeopleSoft Sign-in"" attribute. Additionally, it verifies that the HTTP response status is 200 (OK).

By combining these matching conditions, the module can confidently detect the Oracle PeopleSoft login panel.

Example HTTP request:

GET / HTTP/1.1
Host: example.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3

The module's matching conditions:

- The response body contains the "<title>Oracle PeopleSoft Sign-in</title>" HTML tag and the "alt="Oracle PeopleSoft Sign-in" title="Oracle PeopleSoft Sign-in"" attribute. - The HTTP response status is 200 (OK).

When these conditions are met, the module reports the detection of the Oracle PeopleSoft login panel.

Module preview

Concurrent Requests (0)
Passive global matcher
word: <title>Oracle PeopleSoft Sign-in</title>...and
status: 200
On match action
Report vulnerability