Teltonika Login Panel - Detect

What is the "Teltonika Login Panel - Detect" module?

The "Teltonika Login Panel - Detect" module is designed to detect the presence of the Teltonika login panel. Teltonika is a software that provides a web-based user interface for managing certain devices. This module focuses on identifying the login panel and does not perform any further actions.

This module has an informative severity level, which means it provides valuable information but does not pose an immediate threat.

This module was authored by idealphase.

Impact

The impact of detecting the Teltonika login panel is that it reveals the presence of the web-based user interface. This information can be useful for further analysis and assessment of the device's security posture.

How does the module work?

The module works by sending an HTTP GET request to the "/cgi-bin/luci" path. It then applies two matching conditions to determine if the Teltonika login panel is present:

- The first matching condition uses a regular expression to search for the "" pattern in the response HTML. If a match is found, it indicates the presence of the Teltonika login panel. - The second matching condition checks if the HTTP response status is 200, indicating a successful request. This condition ensures that the response is valid and further confirms the presence of the login panel.

If both matching conditions are met, the module reports the detection of the Teltonika login panel.

Example HTTP request:

GET /cgi-bin/luci

Matching conditions:

- Regex match: <title>Teltonika(.*) - Web UI</title>
- Status code: 200