Qualtrics Login Panel - Detect

What is the "Qualtrics Login Panel - Detect?"

The "Qualtrics Login Panel - Detect" module is designed to detect the presence of the Qualtrics login panel. Qualtrics is a software platform that provides online survey and data collection solutions. This module focuses on identifying the login panel specifically.

This module has an informative severity level, which means it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by tess.

Impact

The impact of detecting the Qualtrics login panel is primarily informational. It does not indicate any immediate security risks or vulnerabilities. Instead, it provides insights into the presence of the login panel, which can be useful for further analysis or auditing purposes.

How does the module work?

The "Qualtrics Login Panel - Detect" module works by sending an HTTP GET request to the "/login" path of the target website. It then applies two matching conditions to determine if the Qualtrics login panel is present:

- The module checks if the response body contains the phrases "Powered by Qualtrics" or "Welcome to Qualtrics Certification". - The module verifies that the response status code is 200 (OK).

If both conditions are met, the module considers the Qualtrics login panel detected.

Here is an example of the HTTP request sent by the module:

GET /login

The matching conditions ensure that the response body contains the expected phrases and that the response status code is 200.