id: dell-idrac9-detect

info:
  name: Detect Dell iDRAC9
  author: kophjager007
  severity: info
  description: The Integrated Dell Remote Access Controller (iDRAC) is designed for secure local and remote server management and helps IT administrators deploy, update and monitor Dell EMC PowerEdge servers.
  metadata:
    max-request: 1
  tags: tech,dell,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/sysmgmt/2015/bmc/info" # Firmware Version and other info (iDRAC9)

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "BuildVersion"
          - "SystemModelName"

    extractors:
      - type: regex
        part: body
        regex:
          - '[0-9]{2}G'

      - type: regex
        part: body
        group: 1
        regex:
          - '"FwVer" *: *"([^"]+)"'
# digest: 4a0a004730450221009c8ed9b60f60882ec0816822c379591eabff4322b996e10cf22511481fe9459402203969e08295b276cf6dab142c3769f43f7d8ca902d5f0ab2ecc52c8b190f38bae:922c64590222798bb761d5b6d8e72950