F5 get objects

From UVOO Tech Wiki
Revision as of 18:27, 20 January 2023 by Busk (talk | contribs)
Jump to navigation Jump to search

Getting

curl -sku $AD_USER:$AD_PASS -X GET https://lb.example.com/mgmt/tm/ltm/virtual | jq > virtual.json
for i in $(cat virtual.json | jq -r .items[].destination | awk -F/ '{print $3}' | awk -F: '{print $1}' | sort -u); do dig -x $i +short >> resolve.txt; done

Here is an example of dumping virtual machines

curl -sku $AD_USER:$AD_PASS -X GET https://lb.example.com/mgmt/tm/ltm/virtual | jq > virtual.json
for i in $(cat virtual.json | jq -r .items[].destination | awk -F/ '{print $3}' | awk -F: '{print $1}' | sort -u); do host $i; done

Here is good way of getting actual domain names being used via https (adjust as needed) too but be careful on prod boxes

tshark -l -i any -f 'dst port ( 443 )' -Y 'ssl.handshake.extension.type == "server_name" || http.host' -T fields -e ip.src -e ip.dst -e tcp.dstport -e http.host -e ssl.handshake.extensions_server_name