id: bigip-config-utility

info:
  name: BIG-IP Configuration Utility detected
  author: dwisiswant0
  severity: info
  metadata:
    max-request: 3
  tags: tech,bigip

http:
  - method: GET
    path:
      - "{{BaseURL}}/tmui/login.jsp"
      - "{{BaseURL}}/tmui/tmui/login/welcome.jsp"

    matchers:
      - type: word
        words:
          - "Welcome to the BIG-IP"
          - "Configuration Utility"
        condition: and
        part: body

  - method: GET
    path:
      - "{{BaseURL}}/mgmt/tm/sys/management-ip"

    matchers:
      - type: word
        words:
          - "Www-Authenticate: Basic realm"
          - "Enterprise Manager"
        condition: and
        part: header

      - type: word
        words:
          - "check your user-id and password and try again"
        part: body
# digest: 4b0a00483046022100f71a2b8b474252d3b882f6c5420b0135f76da58ffd9d10231875d65b4c4fca1e0221009d58cb4833d011d94cdcc5f9407298cd1d0995df6c5946aaaefd32de6bbfe926:922c64590222798bb761d5b6d8e72950