nuclei-templates/technologies/dell/dell-idrac9-detect.yaml

37 lines
1021 B
YAML

id: dell-idrac9-detect
info:
name: Detect Dell iDRAC9
author: kophjager007
description: The Integrated Dell Remote Access Controller (iDRAC) is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers.
severity: info
requests:
- method: GET
headers:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36
path:
- "{{BaseURL}}/sysmgmt/2015/bmc/info" # Firmware Version and other info (iDRAC9)
# iDRAC9 has a different endpoint than 8 and below.
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: all
words:
- "14G"
extractors:
- type: regex
part: body
regex:
- '[0-9]{2}G'
- type: regex
part: body
name: fwver
group: 1
regex:
- '"FwVer" *: *"([^"]+)"'