battleofthebots / refresh

CVE-2022-1388 - F5 Router RCE Replica

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Refresh

This container emulates the vulnerable functionality of CVE-2022-1388 in an F5 Router allowing RCE. CVE-202201388 stems from a complicated relationship between different authentication mechanisms and broxying that stripped Headers allowing improper access to admin endpoints in the webapp. Competitors must use their bot to send a web request exploiting this flaw.

Building

docker build -t refresh .

Running

docker run -p 80:80 refresh

Exploiting

python3 exploit.py -u http://localhost -t

References

About

CVE-2022-1388 - F5 Router RCE Replica


Languages

Language:Python 92.2%Language:Dockerfile 7.8%