Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-1388 | Kitploit
Tools/GitHubGitHub/r0otk3r/cve-2022-1388
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and ControlRed Teaming
GitHubr0otk3r/cve-2022-1388

CVE-2022-1388

View Repository
1 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-1388 - F5 BIG-IP iControl REST Authentication Bypass RCE

This Python script exploits CVE-2022-1388, a critical vulnerability in F5 BIG-IP iControl REST that allows unauthenticated remote command execution via improper access control and HTTP header handling.

⚠️ For educational and authorized security research only. Do not use against systems you do not own or have explicit permission to test.

Vulnerability Summary

  • CVE ID: CVE-2022-1388
  • Vendor: F5 Networks
  • Affected Product: BIG-IP (various versions)
  • Impact: Remote attackers can bypass authentication and execute arbitrary system commands via crafted HTTP requests.

Features

  • Remote command execution via REST API
  • Optional interactive shell (--shell)
  • Custom HTTP basic authentication support
  • SSL verification disabled (for self-signed certs)

Usage

root@kitploit:~
python3 cve_2022_1388_exploit.py -u <target_url> -c "<command>"

Examples

Run a Single Command

root@kitploit:~
python3 cve_2022_1388_exploit.py -u https://192.168.1.1 -c "id"
id

Run with Custom Credentials

root@kitploit:~
python3 cve_2022_1388_exploit.py -u https://192.168.1.1 -a "root:password" -c "whoami"
whoa

Start Interactive Shell

root@kitploit:~
python3 cve_2022_1388_exploit.py -u https://192.168.1.1 --shell
shell

How It Works

  • The script bypasses auth by setting a forged X-F5-Auth-Token and Authorization headers.

  • Sends a POST request to: /mgmt/tm/util/bash

  • Payload triggers execution of the specified shell command.

Mitigation

  • Upgrade to patched F5 BIG-IP versions as recommended by F5 Security Advisory.

  • Restrict access to iControl REST interface.

License

This exploit script is provided for educational purposes only. Usage is entirely at your own risk.

Official Channels

  • YouTube @rootctf
  • X @r0otk3r
Download Tool