来源

关联漏洞

描述

This tool creates a custom signature set on F5 WAF and apply to policies in blocking mode

介绍

# f5-waf-quick-patch-CVE-2021-44228
F5 Networks Advanced WAF/ASM Quick Patch CVE 2021-44228.

# Overview

This tool connects to a BIG-IP device and creates a custom signature set called CVE-2021-4428 and apply it to all policies in blocking mode. It also enforces all signatures and apply the changes. This was tested on BIG-IP ASM v15.x but I believe it should work for v13.x/v14.x/v16.x.

WARNING: this procedure might increase CPU and memory on control plane usage while it is running.

# How it Works

The tool leverages BIG-IP iControl REST API to create the custom signature set as well to performs necessary changes to all policies.

# Installation

pip3 install -r requirements.txt

## Prerequisites

Python 3.7+

Libraries in requirements.txt

The host machine needs to have connection to the BIG-IP management interface.

# How to Use

```
usage: f5-waf-quick-view.py [-h] device

positional arguments:
  device      IP adrresses of the target BIG-IP devices separated by line

optional arguments:
  -h, --help  show this help message and exit

```

文件快照

 [4.0K]  /data/pocs/8a1935b0198a59f376887b3f2731fcf93535cc74
├── [  13]  bigip.txt
├── [6.1K]  f5-waf-quick-patch-cve-2021-44228.py
├── [1.0K]  README.md
└── [  33]  requirements.txt

0 directories, 4 files

备注