f5-awaf-export-policies

A small script to export all AWAF policies from a BIG-IP device.

This script leverages BIG-IP iControl REST API to export ALL AWAF policies in the system and saves them locally. The policies can be exported in the following formats: xml, plc and json.

Note: JSON format only works with TMOS version 16.x.

Tested with BIG-IP 16.1 but should work with older versions.

Usage

usage: f5-awaf-export-policies.py [-h] --device DEVICE --username USERNAME
                                  --password PASSWORD
                                  [--format {json,xml,plc}] [--output OUTPUT]

A small script to export all AWAF policies from a BIG-IP device.

optional arguments:
  -h, --help            show this help message and exit
  --device DEVICE, -d DEVICE
  --username USERNAME, -u USERNAME
  --password PASSWORD, -p PASSWORD
  --format {json,xml,plc}, -f {json,xml,plc}
  --output OUTPUT, -o OUTPUT

Sample Output

$ python f5-awaf-export-policies.py -d 192.168.0.245 -u admin -p "XXXXXXX" -o ./output 
AWAF Policy /PartitionB/awaf_policy_app4 saved to file ./output/PartitionB-awaf_policy_app4.xml.
AWAF Policy /PartitionB/awaf_policy_app3 saved to file ./output/PartitionB-awaf_policy_app3.xml.
AWAF Policy /PartitionA/awaf_policy_app2 saved to file ./output/PartitionA-awaf_policy_app2.xml.
AWAF Policy /PartitionA/awaf_policy_app1 saved to file ./output/PartitionA-awaf_policy_app1.xml.
AWAF Policy /PartitionC/awaf_policy_app6 saved to file ./output/PartitionC-awaf_policy_app6.xml.
AWAF Policy /PartitionC/awaf_policy_app5 saved to file ./output/PartitionC-awaf_policy_app5.xml.

A small script to export all AWAF policies from a BIG-IP device

Related tags

Overview

f5-awaf-export-policies

Usage

Sample Output

Owner

Buffer Overflow para SLmail5.5 32 bits

Set the draft security HTTP header Permissions-Policy (previously Feature-Policy) on your Django app.

This is a simple Port Flooder written in Python 3.

Delta Sharing: An Open Protocol for Secure Data Sharing

A Python r2pipe script to automatically create a Frida hook to intercept TLS traffic for Flutter based apps

Get important strings inside [Info.plist] & and Binary file also all output of result it will be saved in [app_binary].json , [app_plist_file].json file

OpenSource Poc && Vulnerable-Target Storage Box.

Dumping revelant information on compromised targets without AV detection

🏃 Python Solutions of All Problems in FHC 2021 (In Progress)

A kAFL based hypervisor fuzzer which fully supports nested VMs

Recon is a script to perform a full recon on a target with the main tools to search for vulnerabilities.

Password database With special stuff

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Magicspoofing - A python3 script for search possible misconfiguration in a DNS related to security protections of email service from the domain name

Tool for finding PHP source code vulnerabilities.

A tool for making python source difficult to read.

Tool ini berfungsi untuk membuat virus secara instan

Apache Solr SSRF(CVE-2021-27905)

Virus-Builder - This tool will generate a virus that can only destroy Windows computer

FTP-Exploits is a tool made in python that contains 4 diffrent types of ftp exploits that can be used in Penetration Testing.