Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Totemomail Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#totemomail#panel
Description

What is the "Totemomail Login Panel - Detect?"

The "Totemomail Login Panel - Detect" module is designed to detect the presence of the Totemomail login panel. Totemomail is a software used for email encryption. This module focuses on identifying the login panel specifically.

This module has an informative severity level, meaning it provides valuable information but does not indicate a vulnerability or misconfiguration.

The original author of this module is johnk3r and daffainfo.

Impact

This module does not have a direct impact on the system. It simply detects the presence of the Totemomail login panel, providing information about its existence.

How does the module work?

The module works by sending an HTTP GET request to the "/responsiveUI/webmail/folder.xhtml" path. It then applies two matching conditions to determine if the Totemomail login panel is present.

The first matching condition checks the response body for specific words, including the path to the Totemomail logo image, the custom CSS file, and the title tag indicating the presence of the login page.

The second matching condition verifies that the HTTP response status is 200, indicating a successful request.

By combining these matching conditions, the module can accurately detect the Totemomail login panel.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/responsiveUI//responsiveUI/webmai...
Matching conditions
word: /responsiveUI/javax.faces.resource/image...and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability