Class: Intrigue::Ident::Check::Ibm

Inherits:
Base
  • Object
show all
Defined in:
lib/checks/ibm.rb

Instance Method Summary collapse

Methods inherited from Base

inherited

Instance Method Details

#generate_checks(url) ⇒ Object



6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
# File 'lib/checks/ibm.rb', line 6

def generate_checks(url)
  [
    {
      :type => "application",
      :vendor => "IBM",
      :product =>"Axway SecureTranspor",
      :references => ["https://www-356.ibm.com/partnerworld/gsd/solutiondetails.do?&solution=47052"],
      :version => nil,
      :dynamic_version => lambda {|x| _first_header_capture(x,/SecureTransport (.*) (build:.*)/)},
      :match_type => :content_headers,
      :match_content =>  /server: SecureTransport/i,
      :match_details =>"server header - build is avail too",
      :examples => ["https://dhebpcb01.boulder.ibm.com:443"],
      :verify => ["xaWJtI0ludHJpZ3VlOjpFbnRpdHk6OlVyaSNodHRwczovL2RoZWJwY2IwMS5ib3VsZGVyLmlibS5jb206NDQz"],
      :paths => ["#{url}"]
    },
    {
      :type => "application",
      :vendor => "IBM",
      :product =>"Datapower",
      :references => ["https://www.ibm.com/developerworks/community/blogs/HermannSW/entry/datapower_x_backside_transport_transfer_encoding_and_connection_header_fields9?lang=en"],
      :version => nil,
      :match_type => :content_headers,
      :match_content =>  /X-Backside-Transport:/i,
      :match_details =>"header thrown by ibm datapower (on error?)",
      :examples => ["https://css-ewebsvcs.freddiemac.com:443"],
      :paths => ["#{url}"]
    },
    {
      :type => "application",
      :vendor => "IBM",
      :product =>"IBM Security Access Manager for Web",
      :references => ["https://www.ibm.com/support/knowledgecenter/SSPREK_9.0.2.1/com.ibm.isam.doc/wrp_config/concept/con_sam_intro.html"],
      :version => nil,
      :match_type => :content_headers,
      :match_content =>  /www-authenticate: Basic realm=\"IBM Security Access Manager for Web\"/i,
      :match_details =>"IBM security access manager login prompt",
      :examples => ["https://161.107.22.69:443"],
      :paths => ["#{url}"]
    },
    {
      :type => "application",
      :vendor => "IBM",
      :product =>"Tivoli Access Manager for e-business",
      :references => ["https://www.ibm.com/support/knowledgecenter/en/SSPREK_6.1.0/com.ibm.itame.doc_6.1/am61_qsg_en.htm"],
      :version => nil,
      :match_type => :content_body,
      :match_content =>  /<title>Access Manager for e-Business Login/i,
      :match_details =>"Generic Ibm tivoli copyright",
      :examples => ["https://161.107.1.22:443"],
      :paths => ["#{url}"]
    },
    {
      :type => "application",
      :vendor => "IBM",
      :product =>"WebSEAL",
      :references => ["https://www.ibm.com/support/knowledgecenter/en/SSPREK_8.0.1.2/com.ibm.isamw.doc_8.0.1.2/wrp_config/task/tsk_submt_form_data_ws.html"],
      :version => nil,
      :match_type => :content_body,
      :match_content =>  /<form method=\"POST\" action=\"\/pkmslogin.form\">/i,
      :match_details =>"form action to submit to webseal (on ourselves)",
      :examples => ["https://pseuat.fmrei.com:443"],
      :paths => ["#{url}"]
    }

  ]
end