diff --git a/http/exposed-panels/f5-admin-interface.yaml b/http/exposed-panels/f5-admin-interface.yaml new file mode 100644 index 0000000000..d2039b6d73 --- /dev/null +++ b/http/exposed-panels/f5-admin-interface.yaml @@ -0,0 +1,34 @@ +id: f5-admin-interface + +info: + name: F5 Admin Interface - Detect + author: drewvravick + severity: info + description: | + Detects F5 Admin Interfaces. + metadata: + max-request: 1 + verified: true + shodan-query: html:"BIG-IP Configuration Utility" + tags: f5,admin,detect,panel,login + +http: + - method: GET + path: + - "{{BaseURL}}/tmui/login.jsp" + + redirects: true + max-redirects: 2 + + matchers-condition: and + matchers: + - type: word + part: body + words: + - 'Configuration Utility' + - 'F5 Networks' + condition: and + + - type: status + status: + - 200