METASPLOIT-modules/exploits/linux/http/f5_icontrol_rce.rb

METASPLOIT ruby WORKING POC

Exploit for CVE-2022-1388 - F5 BIG-IP iControl RCE via REST Authentication Bypass

AI Analysis

This Metasploit module exploits CVE-2022-1388, an authentication bypass in F5 BIG-IP iControl REST service, to execute commands as root via the /mgmt/tm/util/bash endpoint. It includes checks for vulnerability and supports both Unix command and Linux dropper payloads.

Attack Type

RCE

Complexity

moderate

Reliability

reliable

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1068 - Exploitation for Privilege Escalation

Loading exploit code...

Download ZIP Password: eip

Source

Platform Metasploit