Git Product home page Git Product logo

f5decode's Introduction

F5 cookie泄露内部ip问题

当我们使用f5负载均衡设备时,会需要使用会话保持,如果会话保持使用cookie进行会话保持时,如果配置不注意就会存在内部真实ip地址泄露。判断方法也很简单,只要在cookie中发现有BIGipxxx极有可能使用了F5的负责均衡设备(例子:BIGipServerapp-enterprise-ebank-pool=2588125376.31523.0000)。

1. F5 cookie 解码代码

f5 cookie解码参考地址为:https://my.f5.com/manage/s/article/K6917

f5decode 使用方法

python f5decode.py 335653056.20480.0000

f5decodegui

使用python3 +thinker 编写的GUI解码程序, 打包好的路径再f5decodegui.zip

f5decodegui 程序打包方法

pip install pyinstaller

pyinstaller -F -w f5decodegui.py

2. 内部地址泄露解决方法

请参考以下链接配置F5设备 https://packetpushers.net/encrypted-cookie-persistence/

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.