Exploit for Server-Side Request Forgery in F5 Big-Ip Access Policy Manager

## https://sploitus.com/exploit?id=91A5A7DD-3544-5856-890C-F8D738DAC6F4
# Usage

```
python3 f5_rce.py 
-u Specify target URL
-f Batch detection of files
-c Execute commands
```

The results are as follows:

![](./1.png)

P.S.: The output is not aesthetically pleasing enough; I will modify it 😁

# Issues

This poc currently only supports some commands. Executing commands like `history` and `ls` fails, but the reason is unknown.

![](./2.png)
![](./3.png)

# Future Updates

Update: Modified the exceptions for command execution.

1. Improved regular expression matching and output formatting.
2. Updated other ways of exploiting the poc.

# References

+ [POC link](https://twitter.com/wugeej/status/1372392693989445635)
+ [How Script Boy Reproduced the Vulnerability (CVE-2021-22986) and Implemented Batch Utilization](https://mp.weixin.qq.com/s/cavKq04hNU5pJoTBiPMZkw)