Skip to content

Hide Navigation Hide TOC

F5 BIG-IP iControl Rest API Command Execution - Webserver (85254a62-22be-4239-b79c-2ec17e566c37)

Detects POST requests to the F5 BIG-IP iControl Rest API "bash" endpoint, which allows the execution of commands on the BIG-IP

Cluster A Galaxy A Cluster B Galaxy B Level
Exploit Public-Facing Application - T1190 (3f886f2a-874f-4333-b794-aa6075009b1c) Attack Pattern F5 BIG-IP iControl Rest API Command Execution - Webserver (85254a62-22be-4239-b79c-2ec17e566c37) Sigma-Rules 1