id: silverback-detect

info:
  name: Silverback MDM - Detection
  author: nodauf
  severity: info
  reference:
    - https://help.matrix42.com/010_SUEM/020_UEM/30Enterprise_Mobility_Management/010Installation_and_Update/10_Silverback
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.favicon.hash:635899646
  tags: favicon,tech,silverback,mdm

http:
  - method: GET
    path:
      - "{{BaseURL}}/sts/Content/Images/favicon.ico"

    matchers:
      - type: dsl
        dsl:
          - "status_code==200 && (\"635899646\" == mmh3(base64_py(body)))"

# digest: 490a00463044022023e1cb7c5aa4e8353534a536e6c809befb58c53de58a9725f533eaac7930cdcb02204d844f657d17a39a0adc1fe5ce6a327136843673a4a95fd4f82c2a698ca6b097:922c64590222798bb761d5b6d8e72950