NOMISEC-sashka3076/F5-BIG-IP-exploit

This is a functional exploit for CVE-2022-1388, an authentication bypass vulnerability in F5 BIG-IP iControl REST interface leading to remote code execution. The PoC sends crafted JSON payloads to the `/mgmt/tm/util/bash` endpoint with manipulated headers to bypass authentication and execute arbitrary commands.