Sploitus

Exploit for Missing Authentication for Critical Function in F5 Big-Ip Access Policy Manager

CVE-2022-1388

githubexploit · 2022-05-11

Exploit Code

README14 lines
## https://sploitus.com/exploit?id=D133D476-887B-53A8-A831-16AFB83B7038
shodan  search 'http.html:"BIG-IP Configuration Utility"' --fields=ip_str,port --separator ":" --limit 10 | grep ''
shodan  search 'http.title:"BIG-IP®-+Redirect"+"Server"' --fields=ip_str,port --separator ":" --limit 10 | grep ''

# CVE-2022-1388
CVE-2022-1388 Scanner

Usage $python3 CVE-2022-1388-V1.1.py urls.txt
$cat urls.txt
1.1.1.1
2.2.2.2
3.3.3.3

You can use ip_wrapper.py to add "https://" to list of ips