Skip to content

Detect Dell iDRAC8

ID: dell-idrac8-detect

Severity: info

Author: kophjager007,mr-pmillz

Tags: tech,dell,idrac

The Integrated Dell Remote Access Controller (iDRAC) is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers.

id: dell-idrac8-detect
info:
name: Detect Dell iDRAC8
author: kophjager007,mr-pmillz
severity: info
description: |
The Integrated Dell Remote Access Controller (iDRAC) is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers.
metadata:
max-request: 1
verified: true
tags: tech,dell,idrac
http:
- method: GET
path:
- "{{BaseURL}}/data?get=prodServerGen"
- "{{BaseURL}}/session?aimGetProp=fwVersionFull"
stop-at-first-match: true
matchers-condition: and
matchers:
- type: word
part: body
words:
- "13G"
- '"aimGetProp" :'
- type: status
status:
- 200
extractors:
- type: regex
part: body
regex:
- '[0-9]{2}G'
- type: json
name: fw_version
json:
- ".aimGetProp.fwVersionFull"
# digest: 4b0a00483046022100a139d24a316dac3c573dd4697d352d6f69402774e7f4d18759783e2896df758d022100800473803c97f6cc870447f21cbbc9d136949f60f06227a2fbec545724d5f21f:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/dell/dell-idrac8-detect.yaml"

View on Github