Lucene search
+L

6026 matches found

Kitploit
Kitploit
added 2026/09/12 8:04 p.m.6 views

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST vulnerability RCE exploit with Java. Features Scan a single target Scan multiple targets Exploit with a shell Setup Lab You can find the lab Here Run You can run the code directly by user javac main.java followed by user java main help If you don't have JVM,...

9.8CVSS8.5AI score0.99958EPSS
SaveExploits63References1
Kitploit
Kitploit
added 2026/09/12 7:46 p.m.6 views

CVE-2020-5902-fofa-scan

CVE-2020-5902-fofa-scan Introduction F5 BIG-IP Remote Code Execution Vulnerability CVE-2020-5902, fofa scan script Prerequisites fofa member, fill in the value of fofaproarssession. Modify the keyword value on line 12 yourself. Modify the page number range on line 17 yourself. The methods and...

10CVSS7.4AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/12 7:28 p.m.6 views

Exploit-F5-CVE-2022-1388

Exploit-F5-CVE-2022-1388 PoC For F5 BIG-IP - bash script Exploit one Liner Vulnerable Versions : BIG-IP versions 16.1.0 to 16.1.2 Patch released BIG-IP versions 15.1.0 to 15.1.5 Patch released BIG-IP versions 14.1.0 to 14.1.4 Patch released BIG-IP versions 13.1.0 to 13.1.4 Patch released BIG-IP...

9.8CVSS8.4AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/12 4:15 p.m.4 views

CVE-2020-5902-F5BIG

CVE-2020-5902-F5BIG Just Run Command like 👇 root@kitploit: go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m R -f /etc/issue or go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m C...

10CVSS7.6AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/12 3:32 p.m.5 views

CVE-2021-22986

F5 BIG-IP RCE / CVE-2021-22986 Vulnerabilidad de Ejecución Remota de Código Código por: Tas9er Advertencia Esta herramienta está diseñada para ayudar a las empresas a localizar y corregir vulnerabilidades rápidamente. Solo para uso autorizado en pruebas de seguridad, cumpliendo estrictamente con ...

10CVSS8.3AI score0.99898EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/12 3:06 p.m.9 views

CVE-2022-1388

CVE-2022-1388 This repository conssists of the python exploit code for CVE-2022-1388 F5's BIG-IP RCE usage: exploit.py -h -t TARGET -p PORT -c CMD --ssl options: -h, --help show this help message and exit -t TARGET, --target TARGET Specify the IP Address/Domain Name of the vulnerable server -p...

9.8CVSS8.4AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/12 2:09 p.m.6 views

westone-CVE-2022-1388-scanner

westone-CVE-2022-1388-scanner Las solicitudes no divulgadas pueden omitir la autenticación REST de iControl. Instalación y Uso git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd westone-CVE-2022-1388-scanner cmd CVE-2022-1388.exe...

9.8CVSS8.2AI score0.99958EPSS
SaveExploits65References1
Kitploit
Kitploit
added 2026/09/12 2:02 p.m.5 views

BIG-IP-F5-TMUI-RCE-Vulnerability

BIG-IP-F5-TMUI-RCE-Vulnerability CVE-2020-5902 BIG IP F5 TMUI RCE Vulnerability RCE PoC/ Test Script...

10CVSS7.5AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/12 1:49 p.m.8 views

refreshing-soap-exploit

This is a proof of concept for CVE-2022-41622, which is a CSRF in F5 Big-IP that leads to remote code execution. Using this is a bit finnicky, but I'll walk you through my favourite usecases. The vulnerability The core vulnerability is a cross-site request forgery in F5 Big-IP's SOAP interface,...

8.8CVSS8AI score0.9234EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/12 12:56 p.m.5 views

f5-waf-enforce-sig-CVE-2021-44228

f5-waf-enforce-sigs-CVE-2021-44228 This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device Overview This script enforces all signatures present in the list below related to CVE-2021-44228 across all policies in blocking mode in the Adv. WAF/ASM. sigs = '200104768',...

10CVSS7.4AI score0.99999EPSS
SaveExploits368
Kitploit
Kitploit
added 2026/09/12 10:04 a.m.5 views

CVE-2022-1388

CVE-2022-1388 RCE, Reverse Shell y exportación automática de PCAP -- SOLO PARA USO EDUCATIVO -- El autor no es responsable ni se le puede exigir responsabilidad por cualquier acción realizada con cualquier aspecto de este proyecto/repositorio. Lo creé con el propósito de comprender el ataque y...

9.8CVSS8.5AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/12 5:52 a.m.5 views

CVE-2022-1388

CVE-2022-1388 - F5 BIG-IP iControl REST Authentication Bypass RCE This Python script exploits CVE-2022-1388, a critical vulnerability in F5 BIG-IP iControl REST that allows unauthenticated remote command execution via improper access control and HTTP header handling. ⚠️ For educational and...

9.8CVSS8.5AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/11 11:02 p.m.7 views

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST Authentication Bypass Vulnerability Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Usage python3 CVE-2022-1388.py -u http://127.0.0.1 python3...

9.8CVSS8.4AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/11 10:59 p.m.7 views

CVE-2020-5902

CVE-2020-5902 F5 BIG-IP Traffic Management User Interface TMUI Remote Code Execution In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote...

10CVSS7.5AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/11 10:27 p.m.6 views

F5-BIG-IP-SmuggleShell-CVE-2023-46747-Exploit

F5 BIG-IP CVE-2023-46747 – RCE sin autenticación + Shell inversa Versiones para Python3 y Nuclei – por raguraman RCE crítica sin autenticación CVSS 9.8 mediante AJP + contrabando de solicitudes HTTP Funciona en todos los BIG-IP sin parche 13.x → 17.x incluyendo el último 17.1.0.3 Parche:...

9.8CVSS8.5AI score0.96515EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/11 9:49 p.m.4 views

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE. root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd, X-Forwarded-Server, X-Forwarded-Host...

9.8CVSS8.4AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/11 9:31 p.m.3 views

CVE-2021-22986

Impacto de la Vulnerabilidad Esta vulnerabilidad permite a atacantes no autenticados con acceso de red a la interfaz REST de iControl, a través de la interfaz de gestión de BIG-IP y las direcciones IP propias, ejecutar comandos arbitrarios del sistema, crear o eliminar archivos y deshabilitar...

10CVSS8.7AI score0.99898EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/10 8:11 p.m.7 views

bigip-scanner

BIG-IP Scanner Determine la versión de software en ejecución de una interfaz de gestión remota F5 BIG-IP. Desarrollado con ❤️ por el equipo Bishop Fox Cosmos. Descripción CVE-2022-1388, una vulnerabilidad crítica en la interfaz de gestión de F5 BIG-IP, permite a un atacante omitir la autenticación...

9.8CVSS8.5AI score0.99958EPSS
SaveExploits63References3
Kitploit
Kitploit
added 2026/09/10 7:34 p.m.7 views

CVE-2020-5902-Vuln-Checker

CVE-2020-5902 Vulnerability Checker While looking at the vulnerabilty with fellow researchers we came to the idea that most of the current ways in which to test for the vulnerability can be classed as a form of compromise of the system. We wanted to develop a way in which to test the vulnerabilit...

10CVSS7.5AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/10 12:12 p.m.5 views

minion-ticket-bleed-plugin

Minion Ticketbleed Plugin This is a plugin for Minion that run a check for Ticketbleed CVE-2016-9244 vulnerability on F5 TLS layer. The test can either runs as a go script or an linux binary. The script is improved from https://filippo.io/Ticketbleed/ Installation Clone the project with git clone...

7.5CVSS7.5AI score0.74EPSS
SaveExploits7
Rows per page
Query Builder