CVE-2024-26026

This PoC exploits an unauthenticated SQL injection vulnerability in BIG-IP Next Central Manager's API to leak password hashes. It uses a time-based blind SQLi technique to extract the admin password hash character by character.

This PoC exploits an unauthenticated SQL injection vulnerability in BIG-IP Next Central Manager's API to leak the admin password hash. It uses a blind SQL injection technique with time-based inference to extract the hash character by character.