F5-BIG-IP-CVE-2020-5902

Este repositorio no tiene un README...

CVE-2022-1388

CVE-2022-1388 Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. There is no data plane exposure; this is a...

CVE-2021-22986

CVE-2021-22986 This vulnerability allows for unauthenticated attackers with network access to the iControl REST interface, through the BIG-IP management interface and self IP addresses, to execute arbitrary system commands, create or delete files, and disable services. This vulnerability can only...

CVE-2020-5902-F5BigIP

CVE-2020-5902 dispositivos F5 BIG-IP Resumen: Un paquete de detección Zeek para CVE-2020-5902, una vulnerabilidad CVE10.0 que afecta a dispositivos F5 Networks BIG-IP. Referencias: https://corelight.blog/2020/07/28/zeek-in-its-sweet-spot-detecting-f5s-big-ip-cve10-cve-2020-5902/...

CVE-2025-31644

CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP The “file” parameter of the “save” command is vulnerable to a command injection attack, allowing an authenticated attacker with administrator privileges to the “/mgmt” web API or the SSH “tmsh” shell, to obtain remote code execution...

CVE-2024-21793

CVE-2024-21793 From https://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/...

checker-CVE-2020-5902

Verificador CVE-2020-5902 El Verificador CVE-2020-5902: Las versiones de BIG-IP 15.0.0 a 15.1.0.3, 14.1.0 a 14.1.2.5, 13.1.0 a 13.1.3.3, 12.1.0 a 12.1.5.1, y 11.6.1 a 11.6.5.1 sufren de vulnerabilidades de lectura de archivos arbitraria y ejecución de comandos en la Interfaz de Usuario de Gestión...

CVE-2020-5902

CVE-2020-5902 In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages. Proof of concept...

Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

Nuclei Template CVE-2022-1388 BIG-IP iControl REST Exposed May 06, 2022 This only verifies the presence of the API by hitting the authentication endpoint This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP...

CVE-2020-5902

CVE-2020-5902 POC code for checking for this vulnerability. Since the code has been released, I decided to release this one as well. Patch Immediately! root@kitploit: Usage: python3 CVE-2020-5902.py -u https://big-ip.com -o check 2/dev/null...

CVE-2022-1388

CVE-2022-1388 Poc:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url Exp:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url --attack --command command 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be used for...

CVE-2022-1388

CVE-2022-1388 BIG IP REST RCE En las versiones de F5 BIG-IP 16.1.x anteriores a 16.1.2.2, las versiones 15.1.x anteriores a 15.1.5.1, las versiones 14.1.x anteriores a 14.1.4.6, las versiones 13.1.x anteriores a 13.1.5, y todas las versiones 12.1.x y 11.6.x, las solicitudes no divulgadas pueden...

CVE-2020-5902-Scanner

CVE-2020-5902-Escáner Escáner automatizado de ejecución remota de código en F5 Big IP CVE-2020-5902 escrito en Python 3 Descripción de la vulnerabilidad F5 lanzó una vulnerabilidad crítica de ejecución remota de código CVE-2020-5902 el 30 de junio de 2020 que afecta a varias versiones de Big IP. ...

CVE-2025-20029-simulation

🔐 Replayable Attack Simulation – CVE-2025-20029 ⚠️ This repository simulates CVE-2025-20029 in a safe and controlled environment. It does not interact with real F5 BIG-IP systems or exploit any production service. The goal is educational: to study the vulnerability pattern and test payloads safely...

CVE-2020-5902

CVE-2020-5902 Summary In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages. Proof Of...

CVE-2022-1388

CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage To Check against single host URL root@kitploit: python3 exploit.py -v true -u targeturl To Attack host and test command on this host root@kitploit: python3 exploit.py -a true -u targeturl -c command Attack list of hosts or...

F5-BIG-IP-CVE-2020-5902-shodan-scanner

F5-BIG-IP-CVE-2020-5902-checker Script bash simple de comprobación de F5 BIG-IP CVE-2020-5902 usando Shodan CLI Requisito: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Descargo de responsabilidad: El script es solo para análisis de...

CVE-2020-5902-F5BIG

CVE-2020-5902-F5BIG Simplemente ejecuta el comando como 👇 root@kitploit: go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m R -f /etc/issue or go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m C...

CVE-2020-5902-Scanner

CVE-2020-5902-Scanner Automated script for F5 BIG-IP scanner CVE-2020-5902 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. root@kitploit: CentOS & Fedora sudo yum install g...

cve-2020-5902-ioc-bigip-checker

CVE-2020-5902 Herramienta de Detección de IoC Este script está diseñado para ser ejecutado localmente en un F5 BIG-IP en Advanced Shell bash por un usuario con privilegios de root; no está diseñado para ser ejecutado en ningún otro entorno. Nota: El modo Appliance no permite el acceso a Advanced...