2020-07-06 01:36:25 +00:00
|
|
|
id: bigip-config-utility
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: BIG-IP Configuration Utility detected
|
|
|
|
|
author: dwisiswant0
|
|
|
|
|
severity: informative
|
|
|
|
|
|
|
|
|
|
requests:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/tmui/login.jsp"
|
|
|
|
|
- "{{BaseURL}}/tmui/tmui/login/welcome.jsp"
|
|
|
|
|
matchers:
|
|
|
|
|
- type: word
|
|
|
|
|
words:
|
|
|
|
|
- "Welcome to the BIG-IP"
|
|
|
|
|
- "Configuration Utility"
|
2020-07-06 01:45:33 +00:00
|
|
|
condition: and
|
2020-07-06 01:36:25 +00:00
|
|
|
part: body
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/mgmt/tm/sys/management-ip"
|
|
|
|
|
matchers:
|
|
|
|
|
- type: word
|
|
|
|
|
words:
|
|
|
|
|
- "WWW-Authenticate: Basic realm"
|
|
|
|
|
- "Enterprise Manager"
|
|
|
|
|
condition: and
|
|
|
|
|
part: header
|
|
|
|
|
- type: word
|
|
|
|
|
words:
|
|
|
|
|
- "check your user-id and password and try again"
|
|
|
|
|
part: body
|
