Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Umbraco Login Panel - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#panel#umbraco#detect
Description

What is the "Umbraco Login Panel - Detect?"

The "Umbraco Login Panel - Detect" module is designed to detect the presence of the Umbraco login panel. Umbraco is a popular content management system (CMS) used for building websites and web applications. This module focuses on identifying the login panel specifically.

This module is created by an unknown author.

It has a severity level of "informative", which means it provides information about the presence of the login panel but does not indicate any vulnerabilities or misconfigurations.

Impact

The impact of this module is purely informational. It does not have any direct impact on the security or functionality of the Umbraco CMS or the website using it. It simply provides information about the presence of the login panel.

How the module works?

The "Umbraco Login Panel - Detect" module works by sending an HTTP GET request to the "/umbraco" path of the target website. It then applies two matching conditions to determine if the Umbraco login panel is present:

    - The module checks if the response body contains the string "Umbraco.Sys". This is a specific identifier that indicates the presence of the login panel. - The module also checks if the response status code is 200, indicating a successful request. This ensures that the login panel is accessible.

If both conditions are met, the module reports the presence of the Umbraco login panel.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/umbraco
Matching conditions
word: Umbraco.Sysand
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability