#ITSecurity #ITSec F5 iControl REST Endpoint Authentication Bypass Technical Deep Dive – https://t.co/b5yhY7spxH https://t.co/fzKWQH4bPF, see more h ...May 10, 2022
And finally, a technical analysis on how @JamesHorseman2 and @hacks_zach reversed the patch and developed the POC for CVE-2022-1388:
https://t.co/RE ...May 9, 2022
Over the weekend, multiple researchers published PoCS for CVE-2022-1388. Attackers have already begun exploiting this flaw. Organizations are urged to ...May 9, 2022
My blog post on the F5 BIG-IP auth bypass issue is live! Still working on an in-depth rundown for an AttackerKB post, so keep your eyes out for that o ...May 9, 2022
CVE-2022-1388. This vulnerability affects the BIG-IP iControl REST authentication component and allows remote threat actors to bypass authentication a ...May 9, 2022
I don't understand how knowing the origin ip can help you exploit that reflected xss. A better example would have been a server side vulnerability.
A ...May 9, 2022
Read crowdsource hacker @hakluke documenting Hakoriginfinder, a new tool for bypassing WAFs by discovering the origin host behind a reverse proxy. #WA ...May 9, 2022
#HackTheBox Unicode is now up! Was a fun box that involved exploiting a Claim Misuse vulnerability in a JWT, and some unicode normalization to bypass ...May 7, 2022