id: dell-idrac9-detect

info:
  name: Detect Dell iDRAC9
  author: kophjager007
  severity: info
  description: The Integrated Dell Remote Access Controller (iDRAC) is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers.
  metadata:
    max-request: 1
  tags: tech,dell

http:
  - method: GET
    path:
      - "{{BaseURL}}/sysmgmt/2015/bmc/info" # Firmware Version and other info (iDRAC9)

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "BuildVersion"
          - "SystemModelName"

    extractors:
      - type: regex
        part: body
        regex:
          - '[0-9]{2}G'

      - type: regex
        part: body
        group: 1
        regex:
          - '"FwVer" *: *"([^"]+)"'

# digest: 4b0a00483046022100d9cf0a824be72820360925a8335e8024137172307f4c72e569d44f8ece7bd3b7022100de49a97a18a1b05fb78f9af1a36073ca443dc70c5917baf85b5fca56a4fa58de:922c64590222798bb761d5b6d8e72950