NOMISEC-Angus-Team/F5-BIG-IP-RCE-CVE-2022-1388

NOMISEC WORKING POC
Exploit for CVE-2022-1388 - F5 BIG-IP iControl RCE via REST Authentication Bypass
AI Analysis

This repository contains a Python script that exploits CVE-2022-1388, an RCE vulnerability in F5 BIG-IP. The script allows for single URL exploitation, batch URL scanning with multithreading, and command execution on vulnerable targets.

Attack Type
RCE
Complexity
trivial
Reliability
reliable
MITRE ATT&CK
T1190 - Exploit Public-Facing Application T1210 - Exploitation of Remote Services
Loading exploit code...
Download ZIP Password: eip
Source
Platform Nomisec
Type remote
Files 6
Stars 5
Forks 3
Last Push May 10, 2022
Authors
Angus-Team
Vulnerability
CVE-2022-1388
F5 BIG-IP iControl RCE via REST Authentication Bypass
CRITICAL KEV
CVSS 9.8