Exploit and Check Script for CVE 2022-1388

Andy Gill

Last update: Dec 22, 2022

Related tags

Security related resources F5-CVE-2022-1388-Exploit

Overview

F5-CVE-2022-1388-Exploit

Exploit and Check Script for CVE 2022-1388

Usage

Check against single host

python3 CVE-2022-1388.py -v true -u target_url

Attack host and test command

python CVE_2022_1388.py -a true -u target_url -c command

Attack list of hosts

python CVE_2022_1388.py -s true -f file

masscheck.py will take a file input and check the hosts are vulnerable without exploiting them.

Detection:

Scanning for /mgmt/tm/util/bash as an endpoint, likely to be in web server logs. Or if you have a F5 go patch it, the affected versions are shown below and the patch is available here https://support.f5.com/csp/article/K23605346

Vulnerable Versions

BIG-IP versions 16.1.0 to 16.1.2 (Patch released)
BIG-IP versions 15.1.0 to 15.1.5 (Patch released)
BIG-IP versions 14.1.0 to 14.1.4 (Patch released)
BIG-IP versions 13.1.0 to 13.1.4 (Patch released)
BIG-IP versions 12.1.0 to 12.1.6 (End of Support)
BIG-IP versions 11.6.1 to 11.6.5 (End of Support)

You might also like...

😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.

😭 WSOB (CVE-2022-29464) 😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464. CVE-2022-29464 details:

25 Oct 14, 2022

CVE-2022-22965 - CVE-2010-1622 redux

CVE-2022-22965 - vulnerable app and PoC Trial & error $ docker rm -f rce; docker build -t rce:latest . && docker run -d -p 8080:8080 --name rce rce:la

20 Aug 25, 2022

Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.

Log4Shell RCE Exploit fully independent exploit does not require any 3rd party binaries. The exploit spraying the payload to all possible logged HTTP

258 Jan 2, 2023

Tinyman exploit finder - Tinyman exploit finder for python

tinyman_exploit_finder There was a big tinyman exploit. You can read about it he

9 Dec 27, 2022

Discord-email-spammer-exploit - A discord email spammer exploit with python

Discord-email-spammer-exploit was made by Love ❌ code ✅ 🎈 ・Description First it

25 Aug 13, 2022

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

CVE-2021-40444 builders This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit. This repo is just for testing, re

168 Nov 9, 2022

Exploit for CVE-2017-17562 vulnerability, that allows RCE on GoAhead ( v3.6.5) if the CGI is enabled and a CGI program is dynamically linked.

GoAhead RCE Exploit Exploit for CVE-2017-17562 vulnerability, that allows RCE on GoAhead ( v3.6.5) if the CGI is enabled and a CGI program is dynamic

2 Dec 12, 2021

A scanner and a proof of sample exploit for log4j RCE CVE-2021-44228

1.Create a Sample Vulnerable Application . 2.Start a netcat listner . 3.Run the exploit . 5.Use jdk1.8.0_20 for better results . Exploit-db - https://

7 Aug 6, 2022

Exploit for CVE-2021-3129

laravel-exploits Exploit for CVE-2021-3129

228 Nov 25, 2022

Comments

Doesn't properly identify vulnerable hosts

The script doesn't seem to properly identify vulnerable hosts. It always returns not vulnerable on known vulnerable hosts with a response that is not 200.

{"code":401,"message":"Authorization failed: no user authentication header or token detected. Uri:http://localhost:8100/mgmt/tm/util/bash Referrer:[redacted] Sender:[redacted]","referer":"[redacted]","restOperationId":7273168,"kind":":resterrorresponse"}

opened by Jerry-Lees 2

Owner

Andy Gill

I hack things, write things and break things. So my life is full of things.

GitHub

Exploit and Check Script for CVE 2022-1388

Related tags

Overview

F5-CVE-2022-1388-Exploit

Usage

Detection:

Vulnerable Versions

You might also like...

😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.

CVE-2022-22965 - CVE-2010-1622 redux

Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.

Tinyman exploit finder - Tinyman exploit finder for python

Discord-email-spammer-exploit - A discord email spammer exploit with python

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

Exploit for CVE-2017-17562 vulnerability, that allows RCE on GoAhead ( v3.6.5) if the CGI is enabled and a CGI program is dynamically linked.

A scanner and a proof of sample exploit for log4j RCE CVE-2021-44228

Exploit for CVE-2021-3129

Comments

Doesn't properly identify vulnerable hosts

Owner

Andy Gill

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

POC for CVE-2022-1388

AnonStress-Stored-XSS-Exploit - An exploit and demonstration on how to exploit a Stored XSS vulnerability in anonstress

log4j2 dos exploit,CVE-2021-45105 exploit,Denial of Service poc

CVE-2022-21907 - Windows HTTP协议栈远程代码执行漏洞 CVE-2022-21907

CVE-2022-22536 - SAP memory pipes(MPI) desynchronization vulnerability CVE-2022-22536

Cve-2022-23131 - Cve-2022-23131 zabbix-saml-bypass-exp

A Python script that can be used to check if a SAP system is affected by CVE-2022-22536

DNSpooq - dnsmasq cache poisoning (CVE-2020-25686, CVE-2020-25684, CVE-2020-25685)

Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit