diff --git a/f5-admin-interface.yaml b/f5-admin-interface.yaml new file mode 100644 index 0000000000..1118f041e0 --- /dev/null +++ b/f5-admin-interface.yaml @@ -0,0 +1,24 @@ +id: f5-admin-interface +info: + name: F5 Admin Interface Detection + description: Detects F5 admin interfaces. + author: drewvravick + severity: high + tags: [f5, admin-interface, detection] + +requests: + - method: GET + path: + - "{{BaseURL}}/tmui/login.jsp" + redirects: true + max-redirects: 2 + matchers-condition: and + matchers: + - type: word + words: + - 'BIG-IP Configuration Utility' + - 'F5 Networks' + part: body + - type: status + status: + - 200 \ No newline at end of file