CVE-2020-5902

Readme F5 BIG-IP lettura file arbitrari + esecuzione remota di comandi RCE root@kitploit: +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE +...

Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager

CVE-2020-5902 BIG-IP RCE Update Use /hsqldb%0a/ Bypass Rules For Java Deserialization or /hsqld%b /hsqldb; /tmui/login.jsp/..;/hsqldb Redirect 404 / bypass /hsqldb; Redirect 404 / bypass /hsqldb%0a include 'FileETag MTime Size Redirect 404 / Redirect 404 / ' fix:...

Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager

PoC exploit for CVE-2020-5902, a vulnerability in F5 Networks BIG-IP TMUI web interface. The exploit targets a remote command execution vulnerability in the 'tmui/login.jsp' endpoint, allowing an attacker to read arbitrary files on the system. The vulnerability is exploited by sending a specially...