Forum Discussion

AceDawg1's avatar
AceDawg1
Icon for Nimbostratus rankNimbostratus
Oct 21, 2019

iRule to TCL Conversion Script: https://support.f5.com/csp/article/K15650046

Good day all,

 

Per https://support.f5.com/csp/article/K15650046, looking to analyze a library of iRules for TCL injection vulnerabilities. Will be leveraging tclscan (https://github.com/kugg/tclscan) to do so. One of the prerequisites of tclscan is that the iRule must first be converted to its TCL equivalent.

 

Does anyone have a script that transforms an iRule into a TCL script?

application delivery
iRules
LTM
security
  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Nov 04, 2019

    take the code between the when brackets and add a tcl shebang I guess

    eg

    when HTTP_REQUEST {
# some tcl code here
}

    changes to:

    #!/usr/bin/tclsh
#some tcl code here

    Though i guess it is mainly looking for expr. I used VS code and the irule plugin. I have also used regex to statically check.