Rule Info
Name
F5 BIG-IP iControl Rest API Command Execution - Proxy
Author
Nasreddine Bencherchali (Nextron Systems), Thurein Oo
Description
Detects POST requests to the F5 BIG-IP iControl Rest API "bash" endpoint, which allows the execution of commands on the BIG-IP
Reference
Date
2023-11-08 00:00:00
Modified
None
Id
b59c98c6-95e8-4d65-93ee-f594dfb96b17
Tags
attack.initial-access attack.t1190
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
github-actions[bot]
Merge PR #5027 from @nasbench - Promote older rules status from `experimental` to `test`
2024-10-01
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
Thurein Oo
Merge PR #4552 from @ThureinOo - Add Detection of CVE-2023-46747 Remote Code Execution
2023-11-14
Scan your endpoints, forensic images or collected files with our portable scanner THOR