Pulse Secure Version

What is the "Pulse Secure Version?"

The "Pulse Secure Version" module is designed to detect the version of the Pulse Secure software. Pulse Secure is a secure remote access solution that provides VPN connectivity for organizations. This module focuses on identifying the version of the Pulse Secure software installed on a target system.

This module has an informative severity level, which means it provides valuable information but does not indicate a vulnerability or misconfiguration.

Author: dadevel

Impact

This module does not have any direct impact on the target system. It solely focuses on gathering information about the Pulse Secure version.

How does the module work?

The "Pulse Secure Version" module works by sending HTTP requests to specific endpoints on the target system. It checks the response body for specific patterns to identify the version of the Pulse Secure software.

For example, one of the HTTP requests sent by this module is:

GET /dana-na/nc/nc_gina_ver.txt

The module then looks for specific patterns in the response body, such as "NAME=\"ProductVersion\"" or "version". If any of these patterns are found, the module determines that the Pulse Secure version is present on the target system.

The matching conditions used by this module are case-insensitive and use the logical operator "or". This means that if either of the patterns is found, the module will consider the version detection successful.