Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Piwigo Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#piwigo
Description

What is the "Piwigo Login Panel - Detect?"

The "Piwigo Login Panel - Detect" module is designed to detect the presence of the Piwigo login panel. Piwigo is a software used for managing and sharing photo galleries online. This module focuses on identifying the login panel of Piwigo installations.

This module has an informative severity level, which means it provides valuable information but does not indicate any specific vulnerability or misconfiguration.

Author: daffainfo

Impact

This module does not have any direct impact on the target system. It simply detects the presence of the Piwigo login panel, providing information about the software being used.

How does the module work?

The "Piwigo Login Panel - Detect" module works by sending a GET request to the "/identification.php" path of the target website. It then applies two matching conditions to determine if the Piwigo login panel is present:

- The module checks if the response body contains the following words: "<body id=theIdentificationPage>" and "piwigo.org\">Piwigo</a>". This indicates the presence of the Piwigo login panel. - The module also checks if the response status code is 200, confirming that the page was successfully accessed.

If both matching conditions are met, the module reports the detection of the Piwigo login panel.

Metadata:

- max-request: 1 - verified: true - fofa-query: title="piwigo" - google-query: Powered by Piwigo

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/identification.php
Matching conditions
word: <body id=theIdentificationPage>, piwigo....and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability