2021-05-18 13:53:10 +00:00
id : magento-admin-panel
info :
name : Exposed Magento Admin Panel
2022-06-15 19:39:56 +00:00
author : TechbrunchFR,ritikchaddha
2021-05-18 13:53:10 +00:00
severity : info
2022-06-16 05:13:09 +00:00
description : |
As a security best practice, Magento recommends that you use a unique, custom Admin URL instead of the default admin or a common term such as backend. Although it will not directly protect your site
2022-04-22 10:38:41 +00:00
from a determined bad actor, it can reduce exposure to scripts that try to gain unauthorized access.
reference :
- https://docs.magento.com/user-guide/stores/store-urls-custom-admin.html
2022-06-15 19:42:54 +00:00
metadata :
verified : true
shodan-query : http.component:"Magento"
2021-06-11 07:15:16 +00:00
tags : magento,panel
2021-05-18 13:53:10 +00:00
requests :
- method : GET
path :
- '{{BaseURL}}/admin'
2021-05-18 16:56:34 +00:00
2022-10-07 21:27:25 +00:00
host-redirects : true
2022-06-16 05:13:09 +00:00
max-redirects : 2
2021-05-19 00:43:22 +00:00
matchers-condition : and
2021-05-18 13:53:10 +00:00
matchers :
2021-05-19 00:43:22 +00:00
- type : word
2022-06-15 19:39:56 +00:00
part : body
2021-05-19 00:43:22 +00:00
words :
2022-06-16 05:13:09 +00:00
- "Magento"
- "Admin Panel"
condition : and
