Skip to content

AIX WebSM - Detect

ID: aix-websm-detect

Severity: info

Author: righettod

Tags: network,aix,detect,detection,tcp

Detects IBM AIX Web-based System Manager services.

id: aix-websm-detect
info:
name: AIX WebSM - Detect
author: righettod
severity: info
description: |
Detects IBM AIX Web-based System Manager services.
reference:
- https://en.wikipedia.org/wiki/IBM_Web-based_System_Manager
- https://www.filibeto.org/unix/aix/lib/rel/5.2/wsmadmn.pdf
metadata:
verified: true
max-request: 1
shodan-query: "/websm/"
tags: network,aix,detect,detection,tcp
tcp:
- inputs:
- data: "en_US\r\n"
read: 1024
host:
- "{{Hostname}}"
port: 9090
read-size: 4096
matchers:
- type: word
part: data
words:
- "/var/websm/"
- "startNewWServer"
condition: and
# digest: 4a0a00473045022100a050d88892036ee3d13fbf7fa934ca7d49d5fedd828445c6d0211b0d92c420b402203d34e48c73fbf0d0a8cd17f660440c755f92d78a51d1e69c1448abda991587a8:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "network/detection/aix-websm-detect.yaml"

View on Github