vRealize Log Insight - Panel Detect

What is the "vRealize Log Insight - Panel Detect" module?

The "vRealize Log Insight - Panel Detect" module is a test case designed to detect the presence of the vRealize Log Insight login panel. It is used to identify potential misconfigurations or vulnerabilities related to the vRealize Log Insight software. This module has an informative severity level and was authored by pussycat0x.

Impact

This module does not have a direct impact on the system being scanned. Instead, it provides information about the presence of the vRealize Log Insight login panel, which can help identify potential security risks or configuration issues.

How does the module work?

The "vRealize Log Insight - Panel Detect" module works by sending an HTTP GET request to the "/login?loginUrl=%2Findex" path of the target system. It then applies two matching conditions to determine if the vRealize Log Insight login panel is present:

- Matcher 1: Checks if the response body contains the phrase "vRealize Log Insight". - Matcher 2: Verifies that the response status code is 200 (OK).

If both matching conditions are met, the module reports a successful detection of the vRealize Log Insight login panel.

Example HTTP request:

GET /login?loginUrl=%2Findex HTTP/1.1
Host: [target host]

Note: The actual target host will be substituted in place of "[target host]".