id: dell-idrac9-detect

info:
  name: Detect Dell iDRAC9
  author: kophjager007
  severity: info
  description: The Integrated Dell Remote Access Controller (iDRAC) is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers.
  metadata:
    max-request: 1
  tags: tech,dell

http:
  - method: GET
    path:
      - "{{BaseURL}}/sysmgmt/2015/bmc/info" # Firmware Version and other info (iDRAC9)

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "BuildVersion"
          - "SystemModelName"

    extractors:
      - type: regex
        part: body
        regex:
          - '[0-9]{2}G'

      - type: regex
        part: body
        group: 1
        regex:
          - '"FwVer" *: *"([^"]+)"'
# digest: 490a004630440220711b65cb6ea0d50a49f38fc3fce9a4e00ebd670fbc8d6994b16035da25cbf98502207c6c3c256de1be90d1a7aa921f2da74ab54adc89f460bb58b02d6e566eef4721:922c64590222798bb761d5b6d8e72950