Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

phpCollab Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#phpcollab#login
Description

phpCollab Login Panel - Detect

What is the "phpCollab Login Panel - Detect?"

The "phpCollab Login Panel - Detect" module is designed to detect the presence of the phpCollab login panel. phpCollab is a web-based project management and collaboration tool written in PHP. This module focuses on identifying the login panel specifically.

The severity of this module is classified as informative, meaning it provides information rather than indicating a vulnerability or misconfiguration.

This module was authored by pikpikcu.

Impact

This module does not have any direct impact as it is purely for detection purposes. It does not perform any actions or modifications on the target system.

How does the module work?

The "phpCollab Login Panel - Detect" module works by sending a GET request to the "/general/login.php" path of the target system. It then applies two matching conditions to determine if the phpCollab login panel is present:

    - The module checks if the response body contains the HTML title tag "<title>PhpCollab</title>". - The module verifies that the response status code is 200, indicating a successful request.

If both conditions are met, the module reports a positive detection of the phpCollab login panel.

Classification:

CWE-ID: CWE-200

CVSS-Metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N

Metadata:

max-request: 1

shodan-query: http.title:"PhpCollab"

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/general/login.php
Matching conditions
word: <title>PhpCollab</title>and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability