Files
nuclei-templates/http/technologies/bigip-detect.yaml
2025-10-26 16:17:37 +00:00

44 lines
1.0 KiB
YAML

id: bigip-detect
info:
name: BIGIP - Detection
author: PR3R00T,0x240x23elu
severity: info
reference:
- https://www.intelisecure.com/how-to-decode-big-ip-f5-persistence-cookie-values
- https://support.f5.com/csp/article/K23254150
metadata:
max-request: 2
tags: bigip,tech,f5,discovery
http:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/my.policy"
stop-at-first-match: true
host-redirects: true
matchers:
- type: word
part: header
words:
- 'BIGipServer'
- type: word
part: header
words:
- 'BigIP'
- type: word
part: body
words:
- 'F5 Networks.'
extractors:
- type: regex
part: header
group: 1
regex:
- '(BIGipServer[a-z\_\.\-\~0-9A-Z]*)=([!a-z0-9A-Z/.=]+)'
# digest: 4a0a00473045022100aeb94f95ba2e9d7b9096ab1a48abe908c82fe37ef92e62b58d435117708f15d2022019eead6ad9ce07158b2681a04103e713665f093b01c21293515d2741f0b59c49:922c64590222798bb761d5b6d8e72950