id: bigip-config-utility

info:
  name: BIG-IP Configuration Utility detected
  author: dwisiswant0
  severity: info
  metadata:
    max-request: 3
  tags: tech,bigip,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/tmui/login.jsp"
      - "{{BaseURL}}/tmui/tmui/login/welcome.jsp"

    matchers:
      - type: word
        words:
          - "Welcome to the BIG-IP"
          - "Configuration Utility"
        condition: and
        part: body

  - method: GET
    path:
      - "{{BaseURL}}/mgmt/tm/sys/management-ip"

    matchers:
      - type: word
        words:
          - "Www-Authenticate: Basic realm"
          - "Enterprise Manager"
        condition: and
        part: header

      - type: word
        words:
          - "check your user-id and password and try again"
        part: body
# digest: 490a00463044022027462e21bb7b71f15bac073ec5ebabf9ba8b0ae2e7e0cbbddf6cdaea72973e1b022075616aab34c08f3c0ce49ed0bbe080e81dd96b802ebed67a21a365ec94987009:922c64590222798bb761d5b6d8e72950