test_cve-2023-46747

Script em Python para testar se um F5 BIG-IP está vulnerável ao CVE-2023-46747. Quando vulnerável, uma conta de usuário com direitos de administrador é adicionada. Para mitigar esta vulnerabilidade, consulte: https://my.f5.com/manage/s/article/K000137353...

F5-BIG-IP-SmuggleShell-CVE-2023-46747-Exploit

F5 BIG-IP CVE-2023-46747 – RCE não autenticado + Reverse Shell Versões Python3 e Nuclei – por raguraman RCE crítico não autenticado CVSS 9.8 via AJP + contrabando de requisições HTTP Funciona em todos os BIG-IP sem patch 13.x → 17.x incluindo o mais recente 17.1.0.3 Patch:...

BigFinger

CVE-2023-46747 - Big-IP RCE अप्रमाणित यह एक Python3 स्क्रिप्ट है जो F5 BIG-IP उपकरणों में TMUI इंटरफ़ेस के माध्यम से अप्रमाणित रिमोट कोड निष्पादन भेद्यता CVE-2023-46747 का शोषण करने के लिए है। मूल रूप से, यदि यह भेद्यता हिट करती है, तो आपको बिना क्रेडेंशियल्स के एक शेल मिलता है। थ्रेडिंग, फ़ाइल...

CVE-2023-46747

لا يحتوي هذا المستودع على ملف README...

CVE-2023-46747-RCE

Détails de la vulnérabilité fofa : root@kitploit: title="BIG-IP" || iconhash="-335242539" shodan root@kitploit: title:"BIG-IP" Versions concernées https://my.f5.com/manage/s/article/K000137353 Reproduction de la vulnérabilité 1. Pour le moment, le seul utilisateur ici est admin : 2. Exécutez le...

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

CVE-2023-46747 - Big-IP RCE Unauthenticated This is a Pyth...

China-Linked Group Breaches Networks via Connectwise, F5 Software Flaws

A China-linked threat cluster leveraged security flaws in Connectwise ScreenConnect and F5 BIG-IP software to deliver custom malware capable of delivering additional backdoors on compromised Linux hosts as part of an "aggressive" campaign. Google-owned Mandiant is tracking the activity under its...

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

CVE-2023-46747 Exploit Script This script exploits the F5 B...

F5 BIG-IP TMUI AJP Smuggling Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/proto/apachejp' class MetasploitModule 'F5 BIG-IP TMUI AJP Smuggling RCE', 'Description' = %q This module exploits a flaw in F5's BIG-IP Traffic Management...

F5 BIG-IP TMUI AJP Smuggling Remote Code Execution Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/proto/apachejp' class MetasploitModule 'F5 BIG-IP TMUI AJP Smuggling RCE', 'Description' = %q This module exploits a flaw in F5's BIG-IP Traffic Management...

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

Python script to test if a F5 BIG-IP is vuln...

F5 Networks BIG-IP : BIG-IP Configuration utility unauthenticated remote code execution vulnerability (K000137353)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5.1 + Hotfix-BIGIP-13.1.5.1.0.20.2-ENG / 14.1.5.6 +Hotfix-BIGIP-14.1.5.6.0.10.6-ENG / 15.1.10.2 + Hotfix-BIGIP-15.1.10.2.0.44.2-ENG / 16.1.4.1 + Hotfix- BIGIP-16.1.4.1.0.50.5-ENG / 17.1.0.3 +...

Alert: F5 Warns of Active Attacks Exploiting BIG-IP Vulnerability

F5 is warning of active abuse of a critical security flaw in BIG-IP less than a week after its public disclosure, resulting in the execution of arbitrary system commands as part of an exploit chain. Tracked as CVE-2023-46747 CVSS score: 9.8, the vulnerability allows an unauthenticated attacker wi...

Patch now! BIG-IP Configuration utility is vulnerable for an authentication bypass

Tech company F5 has warned customers about a critical authentication bypass vulnerability impacting its BIG-IP product line that could result in unauthenticated remote code execution. F5 provides services focused on security, reliability, and performance. BIG-IP is a collection of hardware...

F5 BIG-IP Configuration Utility SQL Injection Vulnerability

F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747...

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

CVE-2023-46747-POC F5 BIG-IP unauthenticated remote code execu...

F5 Issues Warning: BIG-IP Vulnerability Allows Remote Code Execution

F5 has alerted customers of a critical security vulnerability impacting BIG-IP that could result in unauthenticated remote code execution. The issue, rooted in the configuration utility component, has been assigned the CVE identifier CVE-2023-46747, and carries a CVSS score of 9.8 out of a maximu...

F5 Networks BIG-IP : Multiple Vulnerabilities (K000137353, K000137365)

The version of F5 Networks BIG-IP installed on the remote host is potentially affected by multiple vulnerabilities as referenced in the K000137353 and K000137365 advisories: - K000137353: BIG-IP Configuration utility unauthenticated remote code execution vulnerability CVE-2023-46747 - K000137365:...

CVE-2023-46747

creationtimestamp| type| source ---|---|--- 2023-10-26 23:26:24+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/7935 2023-10-27 00:18:12+00:00| seen| https://t.me/cibsecurity/73013 2023-10-27 05:50:12+00:00| published-proof-of-concept| https://t.me/ptswarm/192 2023-10-27...

CVE-2023-46747 BIG-IP Configuration utility unauthenticated remote code execution vulnerability

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support EoTS...