How to identify which iRule is vulnerable

Hi Rajesh,

You can easily find this by running a load verify command.

#tmsh load sys config verify

When you run the above command, it will verify all the configuration files, it will particularly verify our bigip.conf file. And wherever it sees this behavior it will throw the below entries,

<irule_name>: warning: [use curly braces to avoid double substitution][<Part_of_ irule_in_question>]. 

It will tell you the Irule name along with the line in which it is affected. Hope this helps.

Also as explained in the article, not everything would be captured but most certainly will. As this is not a bug in the F5 or in the TCL. Its a recommendable coding practice I would say to avoid risks.