danieldurnea / CVE-2022-1388

F5 BIG-IP iControl REST vulnerability RCE exploit with Java including a testing LAB

CVE-2022-1388

F5 BIG-IP iControl REST vulnerability RCE exploit with Java

Included

• Scan a single target
• Scan many targets
• Exploit with a shell

JDK11 required

Setup LAB

• You can find the lab Here

Download

• Download windows executable file Here
• Download JAR file Here

Run

user# java -jar CVE2022-1388.jar help
or
user# CVE2022-1388.exe help

Output:
Scan a single target: java -jar cve-2022-1388.jar scheck
Scan targets from a file: java -jar cve-2022-1388.jar mcheck
Exploit a target: java -jar cve-2022-1388.jar exploit

Screenshot

Author

Zeyad Azima