Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Temenos Transact Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#exposure#temenos
Description

What is the "Temenos Transact Login Panel - Detect" module?

The "Temenos Transact Login Panel - Detect" module is designed to detect the presence of the Temenos Transact login panel. Temenos Transact is a software used for banking and financial services. This module focuses on identifying misconfigurations, vulnerabilities, or specific software fingerprints related to the Temenos Transact login panel. The severity of this module is informative, meaning it provides valuable information but does not pose an immediate threat. This module was created by an original author who is not specified in the module description.

Impact

This module does not directly impact the system being scanned. Instead, it provides information about the presence or absence of the Temenos Transact login panel, which can help identify potential security risks or misconfigurations.

How the module works?

The "Temenos Transact Login Panel - Detect" module works by sending an HTTP GET request to the "/servlet/BrowserServlet" path. It then applies two matching conditions to determine if the Temenos Transact login panel is present:

    - The module checks if the response body contains the following words: "<title>T24 Sign in</title>" and "value="CREATE.SESSION"". This indicates that the login panel is present. - The module verifies that the HTTP response status is 200, indicating a successful request.

If both matching conditions are met, the module reports the presence of the Temenos Transact login panel. If any of the conditions fail, the module does not detect the login panel.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/servlet/BrowserServ...
Matching conditions
word: <title>T24 Sign in</title>, value="CREAT...and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability