Phabricator Login Panel - Detect

What is the "Phabricator Login Panel - Detect?"

The "Phabricator Login Panel - Detect" module is designed to detect the presence of the Phabricator login panel. Phabricator is a software development platform that provides a suite of tools for code review, task management, and collaboration. This module focuses on identifying the login panel specifically.

This module has an informative severity level, which means it provides valuable information but does not indicate a vulnerability or misconfiguration.

Author: dhiyaneshDK

Impact

This module does not have any direct impact on the target system. It simply detects the presence of the Phabricator login panel, providing information about its existence.

How does the module work?

The module works by sending an HTTP GET request to the "/auth/login/" path of the target system. It then applies two matching conditions to determine if the Phabricator login panel is present:

- The first matching condition checks if the response contains the word "phabricator-standard-page". - The second matching condition verifies that the response status is 200 (OK).

If both conditions are met, the module reports a successful detection of the Phabricator login panel.

Example HTTP request:

GET /auth/login/ HTTP/1.1
Host: [target host]

Matching conditions:

- Response contains the word "phabricator-standard-page". - Response status is 200 (OK).