Residential Gateway Login Panel - Detect

What is the "Residential Gateway Login Panel - Detect?" module?

The "Residential Gateway Login Panel - Detect" module is designed to detect the presence of a login panel on a residential gateway. It targets the Residential Gateway software and aims to identify any misconfigurations or vulnerabilities that may exist. The severity of this module is classified as informative, meaning it provides valuable information but does not pose an immediate threat. The original author of this module is idealphase.

Impact

This module does not directly impact the system or network being scanned. Instead, it provides information about the presence of a login panel on a residential gateway. This information can be used to assess the security posture of the gateway and identify potential risks or vulnerabilities.

How does the module work?

The "Residential Gateway Login Panel - Detect" module works by sending an HTTP request to the target gateway and analyzing the response. It uses specific matching conditions to determine if a login panel is present. For example, it checks if the response body contains the HTML title tag "<title>Login - Residential Gateway</title>" and if the HTTP status code is 200 (OK). If both conditions are met, the module considers a login panel to be detected.

Here is an example of the HTTP request sent by the module:

GET /cgi-bin/wwwctrl.cgi?action=home

The module then evaluates the response based on the defined matching conditions to determine if a login panel is present on the residential gateway.