Add template to detect the MDM silverback

patch-1
nodauf 2023-11-09 12:25:18 +01:00 committed by GitHub
parent b308489249
commit 9f2090bd45
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 42 additions and 0 deletions

View File

@ -0,0 +1,42 @@
id: silverback-detect
info:
name: Favicon based Silverback MDM Detection
author: nodauf
severity: info
reference:
- https://help.matrix42.com/010_SUEM/020_UEM/30Enterprise_Mobility_Management/010Installation_and_Update/10_Silverback
metadata:
shodan-query: http.favicon.hash:635899646
tags: favicon,tech
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
matchers:
- type: word
part: body
words:
- "<title>Silverback - Identifiant</title>"
- "silverback-logo-container"
condition: or
- method: GET
path:
- "{{BaseURL}}/sts/Content/Images/favicon.ico"
matchers-condition: or
matchers:
- type: word
part: body
words:
- "<title>Silverback - Identifiant</title>"
- "silverback-logo-container"
condition: or
- type: dsl
dsl:
- "status_code==200 && (\"635899646\" == mmh3(base64_py(body)))"