aaPanel Detection

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""Detect aaPanel Linux management panel."""

from kittysploit import *
from lib.protocols.http.http_client import Http_client


class Module(Scanner, Http_client):
    __info__ = {
        "name": "aaPanel Detection",
        "description": "Detects aaPanel Linux management panel login interface.",
        "author": ["KittySploit Team"],
        "severity": "info",
                "tags": ["web", "scanner", "aapanel", "panel", "linux", "login"],
        "agent": {
            "risk": "active",
            "effects": ["network_probe"],
            "expected_requests": 2,
            "reversible": True,
            "approval_required": False,
            "produces": ["tech_hints", "risk_signals", "endpoints"],
            "cost": 1.0,
            "noise": 0.3,
            "value": 1.0,
            "requires": {
                "min_endpoints": 0,
                "min_params": 0,
                "tech_hints_any": [],
                "tech_hints_all": [],
                "specializations_any": [],
                "risk_signals_any": [],
                "auth_session": False,
                "capabilities_any": [],
                "capabilities_all": [],
                "confidence_min": {},
                "confidence_min_any": {},
                "endpoint_pattern_any": [],
                "param_any": [],
                "api_surface_ready": False,
            },
            "chain": {
                "produces_capabilities": [
                    {"capability": "admin_surface", "from_detail": ""},
                ],
                "consumes_capabilities": [],
                "option_bindings": {},
                "suggested_followups": ["auxiliary/scanner/http/login_page_detector"],
            },
        },
    }

    def run(self):
        markers = (
            "<title>aaPanel Linux panel",
            "Login with aaPanel Mobile",
            "aaPanel Linux panel",
        )
        for path in ("/", "/login"):
            r = self.http_request(method="GET", path=path, allow_redirects=True)
            if not r or r.status_code != 200:
                continue
            body = r.text or ""
            if any(m in body for m in markers):
                self.set_info(
                    severity="info",
                    reason="aaPanel Linux panel detected",
                    path=path,
                )
                return True
        return False