Usage

python3 f5_rce.py 

-u 指定目标URL
-f 批量检测文件
-c 执行命令
-s/--ssrf 通过ssrf获得token执行命令

The effect is as shown below:

python3 f5_rce.py -u 127.0.0.1 --ssrf

After executing the command, enter exit to exit

PS: The output is not elegant enough, I will modify it 😁

Future

Updates:

• Fixed some command execution exceptions
• Added SSRF to obtain Token for executing commands

1. Regex matching, beautify output

2. Update other POC exploitation methods

References

• POC link
• How script kiddies reproduce the vulnerability (CVE-2021-22986) and implement batch exploitation
• CVE-2021-22986