CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST vulnerability RCE exploit with Java. Features Scan a single target Scan multiple targets Exploit with a shell Setup Lab You can find the lab Here Run You can run the code directly by user javac main.java followed by user java main help If you don't have JVM,...

F5-BIG-IP-CVE-2020-5902-shodan-scanner

F5-BIG-IP-CVE-2020-5902-checker Simple bash script of F5 BIG-IP CVE-2020-5902 checker using Shodan CLI Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I...

CVE-2020-5902-Scanner

CVE-2020-5902-Scanner Automated script for F5 BIG-IP scanner CVE-2020-5902 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. root@kitploit: CentOS & Fedora sudo yum install g...

CVE-2021-22986-Poc

CVE-2021-22986-Poc This is a Poc for BIGIP iControl unauth RCE POC : curl -ksu admin:redacted https://192.168.123.134/mgmt/tm/access/bundle-install-tasks -d '"filePath":"id"' | jq . curl -ksu : https://192.168.123.134/mgmt/shared/authn/login -d...

cve-2022-1388-1veresk

CVE-2022-1388 by 1vere$k CVE-2022-1388 the proof-of-concept. Two regimes of work with: simple target URL, default PORT will be set as 80 if it wasn't mentioned; file with list of targets : \n\r; Usage root@kitploit: echo "+-------------------For-The-Help-------------------------------------+"; ec...

CVE-2020-5902-fofa-scan

CVE-2020-5902-fofa-scan Introduction F5 BIG-IP Remote Code Execution Vulnerability CVE-2020-5902, fofa scan script Prerequisites Fofa membership, fill in the value of fofaproarssession. Modify the keyword value on line 12 yourself. Modify the page number range on line 17 yourself. The methods and...

irule-cve-2022-22965

irule-cve-2022-22965 This is a basic iRule to provide some mitigation against CVE-2022-22965 a.k.a. Spring4Shell. Tested on BIG-IP 15.x. Overview On March 30, 2022, a remote code execution RCE vulnerability was found in the Java Spring Framework, identified by the CVE 2022-22965. I am sharing an...

CVE-2020-5902

CVE-2020-5902 Python script to exploit F5 Big-IP CVE-2020-5902 Examples Exploit local file read: python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Exploit RCE: python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

F5-BigIP-CVE-2022-1388

F5-BigIP-CVE-2022-1388 Reverse Shell for CVE-2022-1388 Download and Usage git clone https://github.com/qusaialhaddad/F5-BigIP-CVE-2022-1388.git cd F5-BigIP-CVE-2022-1388 chmod +x Exploit-F5-BigIP-CVE-2022-1388.py python3 Exploit-F5-BigIP-CVE-2022-1388.py -t BigIP-IPAddress:Port -c "tmsh show sys...

CVE-2021-22986

F5 BIG-IP RCE / CVE-2021-22986 Remote Code Execution Vulnerability Code By:Tas9er Warning This tool is intended to help enterprises quickly locate and fix vulnerabilities. It is only for authorized security testing and strictly complies with the Cybersecurity Law of the People's Republic of China...

f5scan

f5scan F5 BIG IP Scanner for CVE-2020-5902 by bt0 More information about the Vulnerability: https://support.f5.com/csp/article/K52145254?sf235665517=1 Requirements: python3+ shodan colorama urlopen pyOpenSSL $ pip3 install -r requirements Options root@kitploit: -h, --help show this help message a...

f5-waf-enforce-sig-CVE-2021-44228

f5-waf-enforce-sigs-CVE-2021-44228 This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device Overview This script enforces all signatures present in the list below related to CVE-2021-44228 across all policies in blocking mode in the Adv. WAF/ASM. sigs = '200104768',...

CVE-2022-1388

CVE-2022-1388 Nuclei Template for CVE-2022-1388. I have used the shadow file for poc , you can use the passwd '/etc/passwd' file as well. Change the Extractor according to your choice. POC Reference: https://support.f5.com/csp/article/K23605346...

CVE-2020-5902

CVE-2020-5902 Auto exploit RCE CVE-2020-5902 F5 BIG-IP RCE + READ FILE Dorks : http.title:"BIG-IP®- Redirect" Using shodan.io...

CVE-2022-1388-rs

CVE-2022-1388-rs Scanner and Interactive shell for CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust Summary To wrap things up here is an overview of the necessary conditions of a request for exploiting this vulnerability: Connection header must include X-F5-Auth-Token...

CVE-2022-1388-Exploit

CVE-2022-1388-Exploit Test and Exploit Scripts for CVE 2022-1388 F5 Big-IP masscheck.py will take a file input and check the hosts are vulnerable without exploiting them. Detection: Scanning for /mgmt/tm/util/bash as an endpoint, likely to be in web server logs. Or if you have a F5 go patch it, t...

CVE-2022-1388-Exploit-POC

CVE-2022-1388 EXPLOIT POC F5 BIG IP root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: REDACTED:8083 Content-Length: 45 Connection: Keep-Alive,X-F5-Auth-Token Cache-Control: max-age=0 X-F5-Auth-Token: SherlockSecure Content-Type: application/json Authorization: Basic YWRtaW46aG9yaXpvbjM=...

f5-waf-quick-patch-cve-2021-44228

f5-waf-quick-patch-CVE-2021-44228 F5 Networks Advanced WAF/ASM Quick Patch CVE 2021-44228. Overview This tool connects to a BIG-IP device and creates a custom signature set called CVE-2021-4428 and apply it to all policies in blocking mode. It also enforces all signatures and apply the changes...

CVE-2022-1388

BIG-IP iControl REST vulnerability CVE-2022-1388 PoC This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services PoC You can...

CVE-2022-1388

CVE-2022-1388 Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. There is no data plane exposure; this is a...