id: silverback-detect

info:
  name: Silverback MDM - Detection
  author: nodauf
  severity: info
  reference:
    - https://help.matrix42.com/010_SUEM/020_UEM/30Enterprise_Mobility_Management/010Installation_and_Update/10_Silverback
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.favicon.hash:635899646
  tags: favicon,tech,silverback,mdm

http:
  - method: GET
    path:
      - "{{BaseURL}}/sts/Content/Images/favicon.ico"

    matchers:
      - type: dsl
        dsl:
          - "status_code==200 && (\"635899646\" == mmh3(base64_py(body)))"
# digest: 4b0a004830460221008ae11d0b79baaad00ff5ff12d328bc3a065f727c9426c37d0fa3d1192215349a022100be3c4e9217f096da264a819bea3ef33a3395fabf513cf7c299b30e2211b14dee:922c64590222798bb761d5b6d8e72950