Skip to content

Portainer Login Panel - Detect

ID: portainer-panel

Severity: info

Author: ritikchaddha

Tags: panel,portainer,detect

id: portainer-panel
info:
name: Portainer Login Panel - Detect
author: ritikchaddha
severity: info
reference:
- https://github.com/portainer/portainer
classification:
cpe: cpe:2.3:a:portainer:portainer:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
vendor: portainer
product: portainer
shodan-query:
- title:"Portainer"
- http.title:"portainer"
fofa-query: title="portainer"
google-query: intitle:"portainer"
tags: panel,portainer,detect
http:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/#!/auth"
stop-at-first-match: true
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<title>Portainer'
- 'ng-app="portainer'
- 'content="Portainer'
- 'alt="Portainer'
- 'portainer.auth'
condition: or
- type: status
status:
- 200
# digest: 4b0a00483046022100ccf7184253e1b1ca01c075cee1bd03975cbf46e00343feff75f53f75ce5c5e90022100bb351aa6ac1b4e2bf7c4e02d6fa197add3d47b0852f880f33c32afa86c5398fd:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/exposed-panels/portainer-panel.yaml"

View on Github