tippa-my-tongue

Tippa My Tongue Tippa My Tongue 是一个利用 CVE-2022-1388 和 CVE-2022-41800 在 F5 BIG-IP 产品上建立 root 反向 Shell 的漏洞利用工具。大多数 CVE-2022-1388 利用工具通过 /mgmt/tm/util/bash 实现代码执行。然而，本工具使用了 /mgmt/shared/iapp/rpm-spec-creator，随后再使用 /mgmt/shared/iapp/build-package。这一方法最早由 Ron Bowes 在 AttackerKB 的这篇 分析文章...

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

Tippa My Tongue Tippa My Tongue is an exploit that uses CVE-2...

F5 BIG-IP iControl Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'F5 BIG-IP iControl Authenticated RCE via RPM Creator', 'Description' = %q This module exploits a newline injection into an RPM .rpmspec file that...