Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Pagespeed Global Admin - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#pagespeed#panel
Description

What is "Pagespeed Global Admin - Detect"?

The "Pagespeed Global Admin - Detect" module is designed to detect the presence of the Pagespeed Global Admin panel. Pagespeed Global Admin is a software that allows website administrators to manage and optimize the performance of their websites. This module focuses on detecting the presence of the Pagespeed Global Admin panel, which can provide valuable insights into the website's performance optimization settings.

This module has an informative severity level, meaning it provides valuable information but does not indicate a critical vulnerability or misconfiguration.

Author: geeknik

Impact

The impact of detecting the Pagespeed Global Admin panel is primarily informational. It provides insights into the website's performance optimization settings and can help administrators make informed decisions regarding their website's performance.

How does the module work?

The "Pagespeed Global Admin - Detect" module works by sending an HTTP GET request to the "/pagespeed-global-admin/" path. It includes specific headers to simulate a client request. The module then applies matching conditions to determine if the Pagespeed Global Admin panel is present.

The matching conditions for this module are:

- Check if the response headers contain the "X-Mod-Pagespeed" header. - Check if the response status code is 200 (OK).

If both matching conditions are met, the module considers the Pagespeed Global Admin panel to be detected.

Example HTTP request:

GET /pagespeed-global-admin/
Headers:
- X-Host: 127.0.0.1
- X-Client-IP: 127.0.0.1
- X-Remote-IP: 127.0.0.1
- X-Remote-Addr: 127.0.0.1
- X-Forwarded-For: 127.0.0.1
- X-Forwarded-Host: 127.0.0.1
- X-Originating-IP: 127.0.0.1

The module performs these checks to provide information about the presence of the Pagespeed Global Admin panel.

Reference: https://www.modpagespeed.com/

Metadata: max-request: 1

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/pagespeed-global-ad...
Headers

X-Host: 127.0.0.1

X-Client-IP: 127.0.0.1

X-Remote-IP: 127.0.0.1

X-Remote-Addr: 127.0.0.1

X-Forwarded-For: 127.0.0.1

X-Forwarded-Host: 127.0.0.1

X-Originating-IP: 127.0.0.1

Matching conditions
word: X-Mod-Pagespeedand
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability