Exploit for Server-Side Request Forgery in F5 Big-Ip Access Policy Manager

## https://sploitus.com/exploit?id=4E7397B3-57E1-5961-BE00-E340DD46B130
# Usage

```
python3 f5_rce.py 

-u Target URL
-f Batch detection
-c Execute command
-s/--ssrf Execute command using SSRF to obtain a token
```

The effect is as follows:

![](./1.png)

```
python3 f5_rce.py -u 127.0.0.1 --ssrf
```
After executing the command, enter `exit` to exit.

![](./ssrf.png)

P.S.: The output is not visually pleasing enough; I will modify it 😁

# Updates

+ Modified some command execution exceptions
+ Added SSRF-based Token-execution commands

~~1. Improved output with regular expression matching~~

~~2. Updated other PoC exploitation methods~~

# References

+ [PoC link](https://twitter.com/wugeej/status/1372392693989445635)
+ [How Script Boy Recreated Vulnerability CVE-2021-22986 and Implemented Batch Exploitation](https://mp.weixin.qq.com/s/cavKq04hNU5pJoTBiPMZkw)
+ [CVE-2021-22986](https://github.com/Al1ex/CVE-2021-22986)