Skip to content

Odoo - Panel Detect

ID: odoo-panel

Severity: info

Author: DhiyaneshDK,righettod

Tags: login,panel,odoo

id: odoo-panel
info:
name: Odoo - Panel Detect
author: DhiyaneshDK,righettod
severity: info
classification:
cpe: cpe:2.3:a:odoo:odoo:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
vendor: odoo
product: odoo
shodan-query:
- title:"Odoo"
- http.title:"odoo"
- cpe:"cpe:2.3:a:odoo:odoo"
fofa-query: title="odoo"
google-query: intitle:"odoo"
tags: login,panel,odoo
http:
- method: GET
path:
- "{{BaseURL}}/web/login"
- "{{BaseURL}}"
stop-at-first-match: true
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<title>Odoo</title>'
- 'odoo.session_info'
- 'web.layout.odooscript'
condition: or
- type: word
part: body
words:
- 'Log in'
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
# digest: 4a0a00473045022100d2965e2c94f894f7318be392a1ce9a648aad93911acf4c8e44bab99cfae156260220355db2b8061bb2a79f619c8f0376d9083d7f6306e1afdf8e22b86be232101b84:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/odoo-panel.yaml"

View on Github