F5 get objects - Revision history

Busk at 18:30, 20 January 2023

2023-01-20T18:30:27Z

Busk at 18:27, 20 January 2023

2023-01-20T18:27:28Z

Busk at 17:58, 20 January 2023

2023-01-20T17:58:02Z

Busk: Created page with "Here is an example of dumping virtual machines {code} curl -sku $AD_USER:$AD_PASS -X GET https://lb.example.com/mgmt/tm/ltm/virtual | jq > virtual.json {code} {code} for i in..."

2023-01-20T17:57:34Z

Created page with "Here is an example of dumping virtual machines {code} curl -sku $AD_USER:$AD_PASS -X GET https://lb.example.com/mgmt/tm/ltm/virtual | jq > virtual.json {code} {code} for i in..."

New page

Here is an example of dumping virtual machines
{code}
curl -sku $AD_USER:$AD_PASS -X GET https://lb.example.com/mgmt/tm/ltm/virtual | jq > virtual.json
{code}

{code}
for i in $(cat virtual.json | jq -r .items[].destination | awk -F/ '{print $3}' | awk -F: '{print $1}' | sort -u); do host $i; done
{code}

Here is good way of getting actual domain names being used via https (adjust as needed) too but be careful on prod boxes

{code}
tshark -l -i any -f 'dst port ( 443 )' -Y 'ssl.handshake.extension.type == "server_name" || http.host' -T fields -e ip.src -e ip.dst -e tcp.dstport -e http.host -e ssl.handshake.extensions_server_name
{code}

@@ Line 5: / Line 5: @@
 for i in $(cat virtual.json | jq -r .items[].destination | awk -F/ '{print $3}' | awk -F: '{print $1}' | sort -u); do dig -x $i +short >> resolve.txt; done
 ```
 Here is an example of dumping virtual machines

@@ Line 1: / Line 1: @@
 Here is an example of dumping virtual machines
 ```
 curl -sku $AD_USER:$AD_PASS -X GET https://lb.example.com/mgmt/tm/ltm/virtual | jq > virtual.json