id: silverback-detect

info:
  name: Silverback MDM - Detection
  author: nodauf
  severity: info
  reference:
    - https://help.matrix42.com/010_SUEM/020_UEM/30Enterprise_Mobility_Management/010Installation_and_Update/10_Silverback
  metadata:
    verified: true
    max-request: 1
    shodan-query: http.favicon.hash:635899646
  tags: favicon,tech,silverback,mdm,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/sts/Content/Images/favicon.ico"

    matchers:
      - type: dsl
        dsl:
          - "status_code==200 && (\"635899646\" == mmh3(base64_py(body)))"
# digest: 4a0a00473045022100e3e73b15c5815efd5b5305d18dc10dd8cdcfe1e488f44f2be0fe7e9d076b0bc902201d8adb7978c61323b984dfaca67159f8dcd48e62bc092300876b3beeaada9461:922c64590222798bb761d5b6d8e72950