Files
nuclei-templates/technologies/bigip-config-utility-detect.yaml
Adam Crosser fd3a7c8fc5 Zoho Desktop Central Authentication Bypass Vulnerability (CVE-2021-44515) (#4142)
* Added Template for CVE-2021-44515

* Update bigip-config-utility-detect.yaml

* Update bigip-config-utility-detect.yaml

* Update bigip-config-utility-detect.yaml

* misc updates

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-04-24 15:42:25 +05:30

35 lines
778 B
YAML

id: bigip-config-utility
info:
name: BIG-IP Configuration Utility detected
author: dwisiswant0
severity: info
tags: tech,bigip
requests:
- method: GET
path:
- "{{BaseURL}}/tmui/login.jsp"
- "{{BaseURL}}/tmui/tmui/login/welcome.jsp"
matchers:
- type: word
words:
- "Welcome to the BIG-IP"
- "Configuration Utility"
condition: and
part: body
- method: GET
path:
- "{{BaseURL}}/mgmt/tm/sys/management-ip"
matchers:
- type: word
words:
- "WWW-Authenticate: Basic realm"
- "Enterprise Manager"
condition: and
part: header
- type: word
words:
- "check your user-id and password and try again"
part: body