From a673b79aa6683fa265547d7addfcf99b8311a886 Mon Sep 17 00:00:00 2001 From: sophron Date: Sun, 2 Mar 2014 17:46:06 +0000 Subject: [PATCH] Added an entry to http-default-accounts-fingerprints that detects F5 BIG-IP router. Patch by nnposter. --- .../http-default-accounts-fingerprints.lua | 21 ++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/nselib/data/http-default-accounts-fingerprints.lua b/nselib/data/http-default-accounts-fingerprints.lua index 892d0d261..c5f05eb38 100644 --- a/nselib/data/http-default-accounts-fingerprints.lua +++ b/nselib/data/http-default-accounts-fingerprints.lua @@ -230,6 +230,26 @@ table.insert(fingerprints, { end }) +table.insert(fingerprints, { + name = "F5 BIG-IP", + category = "routers", + paths = { + {path = "/tmui/login.jsp"} + }, + target_check = function (host, port, path, response) + return response.status == 200 + and response.header["f5-login-page"] == "true" + and response.body + and response.body:find("logmein.html",1,true) + end, + login_combos = { + {username = "admin", password = "admin"} + }, + login_check = function (host, port, path, user, pass) + return try_http_post_login(host, port, path, "logmein.html", "login%.jsp%?msgcode=1", {username=user, passwd=pass}) + end +}) + --- --Digital recorders --- @@ -249,4 +269,3 @@ table.insert(fingerprints, { return try_http_basic_login(host, port, path, user, pass, true) end }) -