id: cisco-ucm-detect

info:
  name: Cisco Unified Communications Manager - Detect
  author: Morgan Robertson
  severity: info
  description: |
    Detected the presence of the Cisco Unified Communications User Management portal.
  reference:
    - https://developer.cisco.com/site/user-data-services/develop-and-test/api-reference/#version
  metadata:
    verified: true
    product: unified_communications_manager
    vendor: cisco
    shodan-query: http.title:"Unified Communications Self Care Portal"
    fofa-query: title="Unified Communications Self Care Portal"
  tags: tech,detect,cisco,ucm

http:
  - method: GET
    path:
      - "{{BaseURL}}/cucm-uds/version"

    headers:
      Accept: application/xml

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        part: body
        words:
          - '<versionInformation'
          - '<version>'
        condition: and

    extractors:
      - type: xpath
        name: version
        xpath:
          - "/versionInformation/version"
# digest: 4b0a00483046022100e725c5ddc70c08f7983fa1da01ce76b7a4adfdaf62347585839e3e958351f552022100a08daaf3425226e15f252c7fda878d83e8522953af011ac039e1373a7bb804da:922c64590222798bb761d5b6d8e72950