CVE-2023-46747

CVE-2023-46747 f5-BIG IP 제품의 사전 인증 원격 코드 실행 취약점CVE-2023-46747을 익스플로잇하기 위해 개발된 스크립트입니다. 이 스크립트는 취약한 f5-BIG IP 제품에서 원격 코드 실행을 익스플로잇하기 위해 제작되었습니다. 설치: root@kitploit: git clone https://github.com/sanjai-AK47/CVE-2023-46747.git cd CVE-2023-46747 pip install -r requirements.txt python3 exploit.py 사용법:...

CVE-2022-1388

CVE-2022-1388 BIG IP REST RCE On F5 BIG-IP 16.1.x versions prior to 16.1.2.2., 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Use the following...

CVE-2020-5902

CVE-2020-5902 In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages. Proof of concept...

CVE-2020-5902-F5BigIP

CVE-2020-5902 F5 BIG-IP devices Summary: A Zeek detection package for CVE-2020-5902, a CVE10.0 vulnerability affecting F5 Networks BIG-IP devices. References: https://corelight.blog/2020/07/28/zeek-in-its-sweet-spot-detecting-f5s-big-ip-cve10-cve-2020-5902/...

CVE-2022-1388

취약점 영향 이 취약점으로 인해 관리 포트 및/또는 셀프 IP 주소를 통해 BIG-IP 시스템에 네트워크 접근이 가능한 인증되지 않은 공격자가 임의의 시스템 명령을 실행하거나, 파일을 생성/삭제하거나, 서비스를 비활성화할 수 있습니다. 취약점 제품 F5 BIG-IQ 11.6.1 - 11.6.5 F5 BIG-IP 12.1.0 - 12.1.6 F5 BIG-IP 13.1.0 - 13.1.4 F5 BIG-IP 14.1.0 - 14.1.4 F5 BIG-IP 15.1.0 - 15.1.5 F5 BIG-IP 16.1.0 - 16.1.2 취약...

CVE-2022-1388

CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage To Check against single host URL root@kitploit: python3 exploit.py -v true -u targeturl To Attack host and test command on this host root@kitploit: python3 exploit.py -a true -u targeturl -c command Attack list of hosts or...

F5-BIG-IP-CVE-2020-5902-shodan-scanner

F5-BIG-IP-CVE-2020-5902-checker Shodan CLIを使用したF5 BIG-IP CVE-2020-5902チェッカーのシンプルなbashスクリプト 必要条件: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation 免責事項: このスクリプトはセキュリティ分析と研究のみを目的としており、違法行為に使用された場合、私は一切の責任を負いません。...

CVE-2020-5902

CVE-2020-5902 Summary In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages. Proof Of...

F5-BIG-IP-RCE-CVE-2022-1388

CVE-2022-1388 F5 BIG-IP RCE Multi-threaded Detection Usage: root@kitploit: 单个url: python3 CVE-2022-1388.py -u https://xxx.xxx.xxx.xxx 批量多线程: python3 CVE-2022-1388.py -f url.txt 执行命令: python3 CVE-2022-1388.py -u https://xxx.xxx.xxx.xxx -c whoami Result:...

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST 脆弱性 RCE エクスプロイト（Java 使用） 機能 単一ターゲットのスキャン 複数ターゲットのスキャン シェルを使用したエクスプロイト ラボのセットアップ ラボはこちらから入手できます: こちら 実行 コードは user javac main.java に続けて user java main help で直接実行できます。 JVM がない場合は、user ./main help を実行してください。GLibc-x8664-linux 対応。 スクリーンショット 作成者 Zeyad Azima 2022年6月1...

CVE-2020-5902

概要 BIG-IPバージョン15.0.0-15.1.0.3、14.1.0-14.1.2.5、13.1.0-13.1.3.3、12.1.0-12.1.5.1、および11.6.1-11.6.5.1において、トラフィック管理ユーザーインターフェースTMUI（設定ユーティリティとも呼ばれる）に、非公開ページにおけるリモートコード実行RCEの脆弱性が存在します。 クレジット: Positive TechnologiesのMikhail Klyuchnikov 概念実証 root@kitploit:...

f5scan

f5scan F5 BIG IP Scanner for CVE-2020-5902 by bt0 More information about the Vulnerability: https://support.f5.com/csp/article/K52145254?sf235665517=1 Requirements: python3+ shodan colorama urlopen pyOpenSSL $ pip3 install -r requirements Options root@kitploit: -h, --help show this help message a...

cve-2022-1388-1veresk

CVE-2022-1388 by 1vere$k CVE-2022-1388 the proof-of-concept. Two regimes of work with: simple target URL, default PORT will be set as 80 if it wasn't mentioned; file with list of targets : \n\r; Usage root@kitploit: echo "+-------------------For-The-Help-------------------------------------+"; ec...

CVE-2022-1388-Scanner

F5 CVE-2022-1388 Scanner BIG-IP iControl REST vulnerability CVE-2022-1388 Scanner Usage root@kitploit: pip install -r requirements.txt pytohn3 CVE-2022-1388-Scanner.py Request root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: REDACTED:8083 Content-Length: 45 Connection: Keep-Alive,...

F5-Big-IP-CVE-2022-1388

F5-Big-IP-CVE-2022-1388 CVE-2022-1388 F5 Big IP unauth remote code execution PoC Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

test_cve-2023-46747

F5 BIG-IP가 CVE-2023-46747에 취약한지 테스트하는 파이썬 스크립트입니다. 취약한 경우 관리자 권한을 가진 사용자 계정이 추가됩니다. 이 취약점을 완화하려면 다음을 참조하십시오: https://my.f5.com/manage/s/article/K000137353...

irule-cve-2022-22965

irule-cve-2022-22965 This is a basic iRule to provide some mitigation against CVE-2022-22965 a.k.a. Spring4Shell. Tested on BIG-IP 15.x. Overview On March 30, 2022, a remote code execution RCE vulnerability was found in the Java Spring Framework, identified by the CVE 2022-22965. I am sharing an...

EvilRip

Cve-2020-5029-finder CVE-2020-5902 に対して脆弱なサブドメイン/IP を探し出すための、bash で書かれた小さなスクリプトです。 影響を受けるバージョン BIG-IP バージョン 15.0.0-15.1.0.3、14.1.0-14.1.2.5、13.1.0-13.1.3.3、12.1.0-12.1.5.1、および 11.6.1-11.6.5.1 では、Configuration utility とも呼ばれる Traffic Management User...

CVE-202122986-EXP

F5 BIG-IP 远程命令执行漏洞（CVE-2021-22986） 漏洞影响 F5 BIG-IP 16.x: 16.1.0.3 F5 BIG-IP 15.x: 15.1.0.4 F5 BIG-IP 14.x: 14.1.2.6 F5 BIG-IP 13.x: 13.1.3.4 F5 BIG-IP 12.x: 12.1.5.2 F5 BIG-IP 11.x: 11.6.5.2 fofa iconhash="-335242539" POC root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: xxx.xxx.xxx.xxx:8443...

cve-2020-5902-ioc-bigip-checker

CVE-2020-5902 IoC Detection Tool This script is intended to be executed locally on an F5 BIG-IP in Advanced Shell bash by a user with root privileges; it is not intended to be run in any other setting. Note: Appliance Mode does not allow access to Advanced Shell, and therefore this tool cannot be...