CVE-2022-1388

Author: SummerSec

README.md

@@ -1,6 +1,6 @@
-<h1 align="center" >SpringExploit</h1>
-<h3 align="center" >一款为了学习go而诞生的漏洞利用工具</h3>
+
  <p align="center">
+ 	<a href="https://github.com/SummerSec/SpringExploit"><img alt="SpringExploit" src="https://socialify.git.ci/SummerSec/SpringExploit/image?font=Raleway&language=1&logo=https%3A%2F%2Fsumsec.me%2Fresources%2FHi.gif&name=1&owner=1&pattern=Circuit%20Board&theme=Light"></a>
     <a href="https://github.com/SummerSec/SpringExploit"></a>
     <a href="https://github.com/SummerSec/SpringExploit"><img alt="SpringExploit" src="https://img.shields.io/badge/SpringExploit-green"></a>
     <a href="https://github.com/SummerSec/SpringExploit"><img alt="Forks" src="https://img.shields.io/github/forks/SummerSec/SpringExploit"></a>
@@ -21,6 +21,7 @@
 * [x] 添加支持CVE-2022-22963 (Spring Cloud Function SpEL RCE)
 * [x] 添加支持CVE-2021-26084 (Atlassian Confluence RCE)
 * [x] 添加支持CVE-2022-22965 (Spring Core RCE)
+* [x] 添加支持CVE-2022-1388 (F5 BIG-IP RCE)
 * [x] 自定义并发
 * [x] 自定义输出日志位置
 * [x] 自定义结果输出位置

cmd/commons/core/banner.go

@@ -15,7 +15,7 @@ const banner = `
 `
 
 // TODO 修改版本号
-const version = "0.0.9"
+const version = "0.1.0"
 
 func ShowBanner(Version string) {
 	fmt.Println(banner)

cmd/commons/core/runner.go

@@ -45,6 +45,8 @@ func (r *Runner) Run() {
 	} else if r.options.Version {
 		getLatestVersion()
 		return
+	} else if r.options.SP {
+		return
 	} else {
 		log.Error("No file or url or ips specified")
 		return

cmd/commons/core/update.go

@@ -77,7 +77,7 @@ func getLatestVersion() {
 
 }
 
-// 获取最新版本从github
+// 从github获取最新版本
 func getLatestVersionFromGithub() string {
 	m := &update.Manager{
 		Store: &githubUpdateStore.Store{
@@ -93,5 +93,22 @@ func getLatestVersionFromGithub() string {
 	}
 	latest := releases[0]
 
+	defer func() {
+		if errs := recover(); errs != nil {
+			log.Error("Failed to get latest version", err)
+		}
+	}()
+
 	return latest.Version
+
+	//u := "https://api.github.com/repos/SummerSec/SpringExploit/releases/latest"
+	//resp, _ := req.R().Get(u)
+	//body, _ := resp.ToString()
+	//var m map[string]interface{}
+	//err := json.Unmarshal([]byte(body), &m)
+	//if err != nil {
+	//	log.Error("Failed to get latest version", err)
+	//	return ""
+	//}
+	//return m["tag_name"].(string)
 }

cmd/commons/core/update_test.go

@@ -14,3 +14,19 @@ func Test_selfUpdate(t *testing.T) {
 		})
 	}
 }
+
+func Test_getLatestVersionFromGithub(t *testing.T) {
+	tests := []struct {
+		name string
+		want string
+	}{
+		// TODO: Add test cases.
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			if got := getLatestVersionFromGithub(); got != tt.want {
+				t.Errorf("getLatestVersionFromGithub() = %v, want %v", got, tt.want)
+			}
+		})
+	}
+}