Ashish Kunwar
Ashish Kunwar
BIG-IP supports iRules - a subset of rules written in TCL. An attacker can inject iRule code in to a request and force a BIG-IP to execute remote code, sniff...
add detection of jexl injection and Hubl Injection
PoC here https://github.com/jas502n/St2-057/blob/master/README.md
**OS command injection vulnerability in FortiWeb's management interface (version 6.3.11 and prior) can allow a remote, authenticated attacker to execute arbitrary commands on the system, via the SAML server configuration...
it would be really awesome if you add Nuclei-Engine Integration to scan with nuclei yaml templates for vulnerabilties. https://github.com/projectdiscovery/nuclei
POC https://app.any.run/tasks/eaf25500-3e11-40f0-a2b4-b4f1c8a185c9