2020-07-06 01:36:25 +00:00
|
|
|
id: bigip-config-utility
|
|
|
|
|
|
|
|
info:
|
|
|
|
name: BIG-IP Configuration Utility detected
|
|
|
|
author: dwisiswant0
|
2020-08-03 21:52:00 +00:00
|
|
|
severity: info
|
2023-04-28 08:11:21 +00:00
|
|
|
metadata:
|
|
|
|
max-request: 3
|
2023-10-14 11:27:55 +00:00
|
|
|
tags: tech,bigip
|
2020-07-06 01:36:25 +00:00
|
|
|
|
2023-04-27 04:28:59 +00:00
|
|
|
http:
|
2020-07-06 01:36:25 +00:00
|
|
|
- method: GET
|
|
|
|
path:
|
|
|
|
- "{{BaseURL}}/tmui/login.jsp"
|
|
|
|
- "{{BaseURL}}/tmui/tmui/login/welcome.jsp"
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2020-07-06 01:36:25 +00:00
|
|
|
matchers:
|
|
|
|
- type: word
|
|
|
|
words:
|
|
|
|
- "Welcome to the BIG-IP"
|
|
|
|
- "Configuration Utility"
|
2020-07-06 01:45:33 +00:00
|
|
|
condition: and
|
2020-07-06 01:36:25 +00:00
|
|
|
part: body
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2020-07-06 01:36:25 +00:00
|
|
|
- method: GET
|
|
|
|
path:
|
|
|
|
- "{{BaseURL}}/mgmt/tm/sys/management-ip"
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2020-07-06 01:36:25 +00:00
|
|
|
matchers:
|
|
|
|
- type: word
|
|
|
|
words:
|
|
|
|
- "WWW-Authenticate: Basic realm"
|
|
|
|
- "Enterprise Manager"
|
|
|
|
condition: and
|
|
|
|
part: header
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2020-07-06 01:36:25 +00:00
|
|
|
- type: word
|
|
|
|
words:
|
|
|
|
- "check your user-id and password and try again"
|
2022-04-24 10:12:25 +00:00
|
|
|
part: body
|