CVE-2020-5902 PoC — F5 BIG-IP 路径遍历漏洞

Source

https://github.com/cristiano-corrado/f5_scanner

Associated Vulnerability

Title:F5 BIG-IP 路径遍历漏洞 (CVE-2020-5902)
Description:F5 BIG-IP是美国F5公司的一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的应用交付平台。 F5 BIG-IP中存在路径遍历漏洞。攻击者可利用该漏洞执行任意的系统命令、创建或删除文件，关闭服务/执行任意的Java代码，可能完全入侵系统。以下产品及版本受到影响：F5 BIG-IP 15.1.0版本，15.0.0版本，14.1.0版本至14.1.2版本，13.1.0版本至13.1.3版本，12.1.0版本至12.1.5版本，11.6.1版本至11.6.5版本。

Description

F5 mass scanner and  CVE-2020-5902 checker

Readme

# f5_scanner
F5 mass scanner and  CVE-2020-5902 checker

# This tool is mass scanner with 30 threads hardcoded use with caution

## How to setup
```
$ python3 -m venv venv
$ source venv/bin/activate
$ python3 -m pip install -r requirements.txt
```
## How to run

### Single IP

python3 f5_scanner.py --ip 192.168.1.1

### CIDR

python3 f5_scanner.py --cidr 192.168.0.0/24

### File
the file should be 1 by line set of single ip address eg :

```
192.168.0.1
192.168.0.2
192.168.0.3
```

python3 f5_scanner.py --file file_with_ips.txt

File Snapshot


 [4.0K]  /data/pocs/07ea0b9e0408d75b939267a1802fecda3c865bd4
├── [4.0K]  conf
│   └── [1.5K]  logging.json
├── [3.2K]  f5_scanner.py
├── [ 682]  logger.py
├── [ 536]  README.md
├── [  93]  requirements.txt
└── [1.2K]  threads.py

1 directory, 6 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!