F5 BIG-IP SSH Private Key Exposure
F5 ships a public/private key pair on BIG-IP appliances that allows passwordless authentication to any other BIG-IP box. Since the key is easily retrievable, an attacker can use it to gain unauthorized remote access as root.
Module Name
exploit/linux/ssh/f5_bigip_known_privkey
Authors
- egypt <egypt [at] metasploit.com>
References
Targets
- Universal
Platforms
- unix
Architectures
- cmd
Reliability
Development
Module Options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/linux/ssh/f5_bigip_known_privkey
msf exploit(f5_bigip_known_privkey) > show targets
...targets...
msf exploit(f5_bigip_known_privkey) > set TARGET <target-id>
msf exploit(f5_bigip_known_privkey) > show options
...show and set options...
msf exploit(f5_bigip_known_privkey) > exploit