id: bigip-config-utility

info:
  name: BIG-IP Configuration Utility detected
  author: dwisiswant0
  severity: info
  metadata:
    max-request: 3
  tags: tech,bigip

http:
  - method: GET
    path:
      - "{{BaseURL}}/tmui/login.jsp"
      - "{{BaseURL}}/tmui/tmui/login/welcome.jsp"

    matchers:
      - type: word
        words:
          - "Welcome to the BIG-IP"
          - "Configuration Utility"
        condition: and
        part: body

  - method: GET
    path:
      - "{{BaseURL}}/mgmt/tm/sys/management-ip"

    matchers:
      - type: word
        words:
          - "Www-Authenticate: Basic realm"
          - "Enterprise Manager"
        condition: and
        part: header

      - type: word
        words:
          - "check your user-id and password and try again"
        part: body
# digest: 4b0a00483046022100943640d37abe04a5f0af2ee33c04094601a1e73428836ee30328cff00cb33719022100b355787419e539082f38db5bd72b0294f6ce34110122d5eaff00715704240ac9:922c64590222798bb761d5b6d8e72950