Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

SQL Buddy Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#sqlbuddy
Description

What is the "SQL Buddy Login Panel - Detect?"

The "SQL Buddy Login Panel - Detect" module is designed to detect the presence of the SQL Buddy login panel. SQL Buddy is a web-based database management tool that allows users to interact with their SQL databases. This module focuses on identifying instances of the SQL Buddy login panel and does not perform any further actions.

This module has an informative severity level, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

This module was authored by nullfuzz.

Impact

The impact of detecting the SQL Buddy login panel is limited to the identification of its presence. This module does not assess the security or vulnerability of the SQL Buddy login panel itself.

How does the module work?

The "SQL Buddy Login Panel - Detect" module works by sending a GET request to the "/sqlbuddy/" path. It then applies matching conditions to determine if the response indicates the presence of the SQL Buddy login panel.

An example of a matching condition used in this module is:

status_code == 200 and contains(body, "<title>SQL Buddy")

This condition checks if the response status code is 200 (indicating a successful request) and if the response body contains the HTML title tag "<title>SQL Buddy". If both conditions are met, the module considers the SQL Buddy login panel to be detected.

It's important to note that this module does not perform any actions beyond detecting the SQL Buddy login panel. It does not attempt to exploit or interact with the panel in any way.

For more information about SQL Buddy, you can visit their official website: http://sqlbuddy.com/

Metadata:

- max-request: 2 - verified: true - shodan-query: http.title:"SQL Buddy"

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/sqlbuddy/
Matching conditions
dsl: status_code == 200, contains(body, `<tit...
Passive global matcher
No matching conditions.
On match action
Report vulnerability