loading
Loading content
loading
Recon
Fingerprint the software version of a remote F5 BIG-IP management interface.
overview
Slot bigip-scanner after a port or service scan flags an F5 management URL. It stops at version ID; discovery and CVE exploit steps stay elsewhere in the graph.
Run it when you already know the host is BIG-IP and need the exact release before picking nuclei templates or manual checks. Without -v, there is no fingerprint table to match against.
Inputs are -t for the management URL and -v for the version table. Outputs are a file and folder. Prefer this over httpx or fingerprintx when you need a release string, not a generic tech hint.
use cases
Fingerprint the management interface so you know the exact version, then map it to known CVEs instead of firing every exploit blindly.
Across an estate of edge appliances, version each BIG-IP interface to find which ones run releases with public, unpatched vulnerabilities.
Feed a host flagged as F5 by a port or service scan into bigip-scanner to confirm the appliance and capture its precise version.
Supply your own version table so the scanner recognizes the releases in your environment and reports drift as devices get patched.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| target | STRING | -t | Target URL of the BIG-IP management interface. |
| version-table | FILE | -v | Version table mapping resource fingerprints to releases. |
| all | BOOLEAN | -a | Request all resources instead of stopping at the first exact match. |
| debug | BOOLEAN | -d | Debug mode, showing the requests and responses used to fingerprint. |
Showing key inputs. bigip-scanner exposes 4 inputs in total.
example
# fingerprint a BIG-IP management URL against the version tablebigip-scanner -t https://bigip.example.com -v version-table.txt[*] Target: https://bigip.example.com[*] Loading version table[*] Probing management resources[+] Exact match: BIG-IP 15.1.5 Build 0.0.1[*] Host: bigip.example.com[*] Interface: https://bigip.example.com[+] Version written for downstream CVE mappingguidance
Use bigip-scanner once a port scan or fingerprinter such as naabu or fingerprintx has already flagged an F5 BIG-IP management interface. It versions a known appliance; it does not find hosts.
General service fingerprinter across many protocols. bigip-scanner is built only for F5 BIG-IP releases.
Runs CVE templates once you know the version. bigip-scanner supplies that version string.
Detects tech and titles broadly. bigip-scanner pins the exact BIG-IP release a broad prober only hints at.
faq
related
Multi-source subdomain discovery; hand names to httpx.
Find domains and subdomains potentially related to a given domain.
CLI client for the BeVigil OSINT API, keyed by domain or app package.
Multi-cloud public name enumeration for AWS, Azure, and GCP.
List assets from multiple cloud providers in one inventory.
Active multi-technique DNS enumeration for assessments.
A host is probed by httpx to confirm a live F5 interface, then bigip-scanner fingerprints its release and writes the detected version as a queryable output.
Facts on this page come from the live Trickest tool library.