nuclei-templates/technologies/dell/dell-idrac9-detect.yaml

34 lines
817 B
YAML
Raw Normal View History

2021-02-26 18:49:21 +00:00
id: dell-idrac9-detect
2021-02-25 22:31:38 +00:00
info:
2021-02-26 18:49:21 +00:00
name: Detect Dell iDRAC9
2021-02-25 22:31:38 +00:00
author: kophjager007
description: The Integrated Dell Remote Access Controller (iDRAC) is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers.
severity: info
requests:
- method: GET
path:
- "{{BaseURL}}/sysmgmt/2015/bmc/info" # Firmware Version and other info (iDRAC9)
2021-02-25 22:31:38 +00:00
matchers-condition: and
2021-02-25 22:31:38 +00:00
matchers:
- type: status
status:
- 200
2021-02-25 22:31:38 +00:00
- type: word
2021-02-26 18:49:21 +00:00
part: all
2021-02-25 22:31:38 +00:00
words:
2021-02-26 18:49:21 +00:00
- "14G"
extractors:
- type: regex
part: body
regex:
2021-02-26 18:49:21 +00:00
- '[0-9]{2}G'
- type: regex
part: body
name: fwver
group: 1
regex:
2021-02-26 18:49:21 +00:00
- '"FwVer" *: *"([^"]+)"'