Exploit for Missing Authentication for Critical Function in F5 Big-Ip Access Policy Manager

## https://sploitus.com/exploit?id=C39D4BF6-5B98-5653-AA56-8DC5F53FEDA7
# CVE-2022-1388-EXP  
This is CVE-2022-1388-EXP  
Author: Caps@BUGFOR  
Github: https://github.com/bytecaps  
Remaker: LinJacck  
Github: https://github.com/LinJacck  

# Function Demonstration  
Verification Mode: python CVE_2022_1388.py -v -u target_url  
Attack Mode: python CVE_2022_1388.py -a -u target_url -c command  
Batch Detection: python CVE_2022_1388.py -s -f file  
WebShell Mode: python CVE_2022_1388.py -r -u target_url  

Note: If the “Verification Mode” shows suspected vulnerabilities but they cannot be exploited, it indicates that the system has changed the default password, making unauthorized attacks impossible.  

# New Features  
1. Corrected errors in the original code, enabling unauthorized attacks.  
2. Changed the scanning mode; now the scanning speed is faster and less likely to be detected.  
3. Implemented WebShell functionality.  
4. Modified the command mode for greater convenience.