f5-awaf-export-policies

A small script to export all AWAF policies from a BIG-IP device.

This script leverages BIG-IP iControl REST API to export ALL AWAF policies in the system and saves them locally. The policies can be exported in the following formats: xml, plc and json.

Note: JSON format only works with TMOS version 16.x.

Tested with BIG-IP 16.1 but should work with older versions.

Usage

usage: f5-awaf-export-policies.py [-h] --device DEVICE --username USERNAME
                                  --password PASSWORD
                                  [--format {json,xml,plc}] [--output OUTPUT]

A small script to export all AWAF policies from a BIG-IP device.

optional arguments:
  -h, --help            show this help message and exit
  --device DEVICE, -d DEVICE
  --username USERNAME, -u USERNAME
  --password PASSWORD, -p PASSWORD
  --format {json,xml,plc}, -f {json,xml,plc}
  --output OUTPUT, -o OUTPUT

Sample Output

$ python f5-awaf-export-policies.py -d 192.168.0.245 -u admin -p "XXXXXXX" -o ./output 
AWAF Policy /PartitionB/awaf_policy_app4 saved to file ./output/PartitionB-awaf_policy_app4.xml.
AWAF Policy /PartitionB/awaf_policy_app3 saved to file ./output/PartitionB-awaf_policy_app3.xml.
AWAF Policy /PartitionA/awaf_policy_app2 saved to file ./output/PartitionA-awaf_policy_app2.xml.
AWAF Policy /PartitionA/awaf_policy_app1 saved to file ./output/PartitionA-awaf_policy_app1.xml.
AWAF Policy /PartitionC/awaf_policy_app6 saved to file ./output/PartitionC-awaf_policy_app6.xml.
AWAF Policy /PartitionC/awaf_policy_app5 saved to file ./output/PartitionC-awaf_policy_app5.xml.

A small script to export all AWAF policies from a BIG-IP device

Related tags

Overview

f5-awaf-export-policies

Usage

Sample Output

Owner

An open-source post-exploitation framework for students, researchers and developers.

High level cheatsheet that was designed to make checks on the OSCP more manageable

A TCP Backdoor made in python

A BurpSuite extension to parse 5GC NF OpenAPI 3.0 files to assess 5G core networks

An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.

Generates password lists/dictionaries based on keywords written in python3.

This enforces signatures for CVE-2021-44228 across all policies on a BIG-IP ASM device

LittleBrother is a simple parental control application monitoring specific processes on Linux hosts to monitor and limit the play time of children.

Backdoor is a term that refers to the access of the software or hardware of a computer system without being detected.

POC for CVE-2022-1388

Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)

Phishing Campaign Toolkit

MS-FSRVP coercion abuse PoC

Python DNS Lookup: The Domain Name System (DNS) is basically the phonebook of the Internet

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

You can manage your password with this program.

Whois-Python - Get Whois Domain with Python GUI

将hw时信息收集以及简单的漏洞操作步骤简单化

A signature parser for hikari's command handler tanjun.

CVE-2021-22205 Unauthorized RCE