BIG-IP Configuration Utility detected

ID: bigip-config-utility

Severity: info

Author: dwisiswant0

Tags: tech,bigip

Description

YAML Source

id: bigip-config-utility

info:
  name: BIG-IP Configuration Utility detected
  author: dwisiswant0
  severity: info
  metadata:
    max-request: 3
  tags: tech,bigip

http:
  - method: GET
    path:
      - "{{BaseURL}}/tmui/login.jsp"
      - "{{BaseURL}}/tmui/tmui/login/welcome.jsp"

    matchers:
      - type: word
        words:
          - "Welcome to the BIG-IP"
          - "Configuration Utility"
        condition: and
        part: body

  - method: GET
    path:
      - "{{BaseURL}}/mgmt/tm/sys/management-ip"

    matchers:
      - type: word
        words:
          - "Www-Authenticate: Basic realm"
          - "Enterprise Manager"
        condition: and
        part: header

      - type: word
        words:
          - "check your user-id and password and try again"
        part: body
# digest: 4b0a00483046022100f71a2b8b474252d3b882f6c5420b0135f76da58ffd9d10231875d65b4c4fca1e0221009d58cb4833d011d94cdcc5f9407298cd1d0995df6c5946aaaefd32de6bbfe926:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/technologies/bigip-config-utility-detect.yaml"

View on Github